CVE-2018-19134

In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute arbitrary code in the context of the Ghostscript process. This is a type confusion issue because of failure to check whether the Implementation of a pattern dictionary was a structure type.

Link	Resource
https://www.ghostscript.com/doc/9.26/News.htm	Release Notes
https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf	Exploit Third Party Advisory
https://bugs.ghostscript.com/show_bug.cgi?id=700141	Issue Tracking Permissions Required
https://access.redhat.com/errata/RHSA-2018:3834	Third Party Advisory
http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=693baf02152119af6e6afd30bb8ec76d14f84bbf	Patch Third Party Advisory
http://www.securityfocus.com/bid/106278	Third Party Advisory VDB Entry
https://lists.debian.org/debian-lts-announce/2018/12/msg00019.html	Third Party Advisory

Configuration 1

cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*

---

Published : 2018-12-20 11:29

Updated : 2019-01-11 03:54

---

NVD link : CVE-2018-19134

Mitre link : CVE-2018-19134

No products.

CWE-704