PT-2018-14825 · Artifex+3 · Artifex Ghostscript+3

Published 2018-11-27 · Updated 2019-01-11 · CVE-2018-19134

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 9.26

Description The setpattern operator in Artifex Ghostscript did not properly validate certain types, which could be exploited by a specially crafted PostScript document to crash Ghostscript or possibly execute arbitrary code in the context of the Ghostscript process. This issue is due to a type confusion problem resulting from the failure to check whether the implementation of a pattern dictionary was a structure type.

Recommendations For Artifex Ghostscript versions prior to 9.26, update to version 9.26 or later to resolve the issue. As a temporary workaround, consider restricting the use of the setpattern operator until a patch is available. Avoid using potentially malicious PostScript documents to minimize the risk of exploitation.

Exploit

Fix

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

ALT-PU-2018-2799

CESA-2018_3834

CVE-2018-19134

DLA-1620-1

DSA-4346-1

DSA-4346-2

RHSA-2018:3834

RHSA-2018_3834

Affected Products

Alt Linux

Artifex Ghostscript

Centos

Red Hat

References · 17

• 🔥 https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf · Exploit
• https://osv.dev/vulnerability/DSA-4346-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-19134 · Security Note
• https://osv.dev/vulnerability/DSA-4346-2 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:3834 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-19134 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-19134 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-19134 · Security Note
• https://osv.dev/vulnerability/CVE-2018-19134 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-19134 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1620-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-19134 · Vendor Advisory
• http://securityfocus.com/bid/106278 · Note
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=693baf02152119af6e6afd30bb8ec76d14f84bbf · Note
• https://ghostscript.com/doc/9.26/News.htm · Note