PT-2018-1914 · Artifex+5 · Artifex Ghostscript+5

Tavis Ormandy

·

Publicado

2018-10-09

·

Atualizado

2024-06-15

·

CVE-2018-18073

CVSS v3.1

6.3

Média

VetorAV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Artifex Ghostscript (affected versions not specified)
Description The issue is related to the bypass of a sandbox protection mechanism in Artifex Ghostscript. This is due to the exposure of system operators in the saved execution stack in an error object, which can be leveraged by attackers. The vulnerability is also described as being related to a lack of protection for service data, allowing a local attacker to bypass the sandbox protection mechanism and potentially disclose protected information.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2018-2799
BDU:2018-01518
CESA-2018_3834
CVE-2018-18073
DLA-1552-1
DSA-4336-1
MGASA-2018-0408
OPENSUSE-SU-2018_4138-1
OPENSUSE-SU-2018_4140-1
OPENSUSE-SU-2024:10783-1
RHSA-2018:3834
RHSA-2018_3834
SUSE-SU-2018:4087-1
SUSE-SU-2018:4090-1
SUSE-SU-2018:4090-2
USN-3803-1

Produtos afetados

Alt Linux
Artifex Ghostscript
Centos
Red Hat
Suse
Ubuntu