PT-2018-14825 · Artifex+3 · Artifex Ghostscript+3

Publicado 2018-11-27 · Atualizado 2019-01-11 · CVE-2018-19134

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 9.26

Description The setpattern operator in Artifex Ghostscript did not properly validate certain types, which could be exploited by a specially crafted PostScript document to crash Ghostscript or possibly execute arbitrary code in the context of the Ghostscript process. This issue is due to a type confusion problem resulting from the failure to check whether the implementation of a pattern dictionary was a structure type.

Recommendations For Artifex Ghostscript versions prior to 9.26, update to version 9.26 or later to resolve the issue. As a temporary workaround, consider restricting the use of the setpattern operator until a patch is available. Avoid using potentially malicious PostScript documents to minimize the risk of exploitation.

Exploit

Correção

Incorrect Type Conversion or Cast

Enumeração de Fraquezas

CWE-704

Identificadores relacionados

ALT-PU-2018-2799

CESA-2018_3834

CVE-2018-19134

DLA-1620-1

DSA-4346-1

DSA-4346-2

RHSA-2018:3834

RHSA-2018_3834

Produtos afetados

Alt Linux

Artifex Ghostscript

Centos

Red Hat

Referências · 17

• 🔥 https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf · Exploit
• http://securityfocus.com/bid/106278 · Nota
• https://osv.dev/vulnerability/DSA-4346-1 · Aviso do Fabricante
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=693baf02152119af6e6afd30bb8ec76d14f84bbf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-19134 · Nota de Segurança
• https://ghostscript.com/doc/9.26/News.htm · Nota
• https://osv.dev/vulnerability/DSA-4346-2 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2018:3834 · Aviso do Fabricante
• https://bugs.ghostscript.com/show_bug.cgi?id=700141 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-19134 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-19134 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-19134 · Nota de Segurança
• https://lists.debian.org/debian-lts-announce/2018/12/msg00019.html · Nota
• https://osv.dev/vulnerability/CVE-2018-19134 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-19134 · Aviso do Fabricante