CVE-2018-16510

Published: Sep 5, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact.

Affected (5)

Products: Artifex: Ghostscript, Gpl Ghostscript · Canonical: Ubuntu Linux

2 products

Gpl Ghostscript

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Artifex Ghostscript	Before 9.24

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Artifex Gpl Ghostscript	Before 9.26

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=ea735ba37dc0fd5f5622d031830b9a559dec1cc9

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2018/08/27/4

Source: cve@mitre.org

Issue TrackingMailing ListPatchThird Party Advisory

https://bugs.ghostscript.com/show_bug.cgi?id=699671

Source: cve@mitre.org

Issue TrackingPermissions Required

https://security.gentoo.org/glsa/201811-12

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/3768-1/

Source: cve@mitre.org

Third Party Advisory

https://usn.ubuntu.com/3773-1/

Source: cve@mitre.org

Third Party Advisory

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=ea735ba37dc0fd5f5622d031830b9a559dec1cc9

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2018/08/27/4

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingMailing ListPatchThird Party Advisory

https://bugs.ghostscript.com/show_bug.cgi?id=699671

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPermissions Required

https://security.gentoo.org/glsa/201811-12

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/3768-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://usn.ubuntu.com/3773-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.