PT-2018-1531 · Artifex+5 · Artifex Ghostscript+5

Tavis Ormandy · Publicado 2018-02-21 · Atualizado 2024-06-15 · CVE-2018-15909

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 9.23

Description The issue is related to a type confusion in the .shfill operator, which can be exploited by attackers who can supply crafted PostScript files. This could potentially lead to the execution of code or a crash of the interpreter. The vulnerability is associated with a buffer overflow due to type confusion in the .shfill operator when processing PostScript files.

Recommendations For Artifex Ghostscript versions prior to 9.23, update to version 9.23 or later to resolve the issue. As a temporary workaround, consider restricting the use of the .shfill operator or avoiding the processing of untrusted PostScript files until the update is applied.

Correção

Buffer Overflow

Type Confusion

Incorrect Type Conversion or Cast

Enumeração de Fraquezas

CWE-119

CWE-843

CWE-704

Identificadores relacionados

ALT-PU-2018-2799

BDU:2018-01086

CESA-2018_3650

CVE-2018-15909

DLA-1504-1

DSA-4288-1

MGASA-2018-0378

OPENSUSE-SU-2018_3036-1

OPENSUSE-SU-2018_3038-1

OPENSUSE-SU-2024:10783-1

RHSA-2018:3650

RHSA-2018_3650

SUSE-SU-2018:2975-1

SUSE-SU-2018:2975-2

SUSE-SU-2018:2975-3

SUSE-SU-2018:2976-1

USN-3768-1

Produtos afetados

Alt Linux

Artifex Ghostscript

Centos

Red Hat

Suse

Ubuntu

Referências · 119

• http://securityfocus.com/bid/105178 · Nota
• https://ubuntu.com/security/CVE-2018-16542 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-10194 · Nota
• https://ubuntu.com/security/CVE-2018-15910 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2018/09/11/1 · Nota
• https://suse.com/security/cve/CVE-2018-16510 · Nota
• https://suse.com/security/cve/CVE-2018-17183 · Nota
• https://bugzilla.suse.com/1109105 · Nota
• https://suse.com/security/cve/CVE-2016-10218 · Nota
• https://suse.com/support/update/announcement/2018/suse-su-20182975-1 · Nota
• https://security.alpinelinux.org/vuln/CVE-2018-15909 · Nota
• https://ubuntu.com/security/CVE-2018-16510 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2018/09/09/2 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2018:2976-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1107422 · Nota