Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Vítor Hugo Silva

#32656of 53,633
7.8Total CVSS
Vulnerabilities · 1
PT-2018-1827
7.8
2018-04-18
Artifex · Ghostscript · CVE-2018-10194
Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions through 9.22 Description: The issue is related to the `set text distance` function in the pdfwrite component, which does not prevent overflows in text-positioning calculation. This allows remote attackers to cause a denial of service, potentially leading to an application crash, via a crafted PDF document. The vulnerability may also have unspecified other impacts. Recommendations: For versions through 9.22, consider disabling the `set text distance` function as a temporary workaround until a patch is available. Restrict access to the pdfwrite component to minimize the risk of exploitation. Avoid using crafted PDF documents that could trigger the overflow in text-positioning calculation until the issue is resolved.