Artifex · Ghostscript · CVE-2018-10194
Name of the Vulnerable Software and Affected Versions:
Artifex Ghostscript versions through 9.22
Description:
The issue is related to the `set text distance` function in the pdfwrite component, which does not prevent overflows in text-positioning calculation. This allows remote attackers to cause a denial of service, potentially leading to an application crash, via a crafted PDF document. The vulnerability may also have unspecified other impacts.
Recommendations:
For versions through 9.22, consider disabling the `set text distance` function as a temporary workaround until a patch is available. Restrict access to the pdfwrite component to minimize the risk of exploitation. Avoid using crafted PDF documents that could trigger the overflow in text-positioning calculation until the issue is resolved.