Description
In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.
References (10)
Scores
CVSS v3
7.8
EPSS
0.0227
EPSS Percentile
84.7%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-704
Status
published
Products (13)
artifex/ghostscript
< 9.23
artifex/gpl_ghostscript
< 9.26
canonical/ubuntu_linux
14.04
canonical/ubuntu_linux
16.04
canonical/ubuntu_linux
18.04
debian/debian_linux
8.0
pulsesecure/pulse_connect_secure
8.2r1.0 - 8.2r12.1
redhat/enterprise_linux_desktop
7.0
redhat/enterprise_linux_server
7.0
redhat/enterprise_linux_server_aus
7.6
... and 3 more
Published
Aug 27, 2018
Tracked Since
Feb 18, 2026