Artifex Ghostscript before 9.25 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-docUpgrade libgsUpgrade ghostscriptUpgrade ghostscript-debuginfoUpgrade libgs-devel | Feb 22, 2021 | Sep 19, 2018 |
| Centos_linux | — | Upgrade ghostscript-docUpgrade ghostscriptUpgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade ghostscript-develUpgrade ghostscript-gtk | Dec 20, 2018 | Sep 19, 2018 |
| Debian | — | Upgrade ghostscript | Feb 19, 2019 | Sep 19, 2018 |
| Ghostscript | — | Upgrade to Ghostscript version 9.25 | Oct 10, 2018 | Sep 19, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Feb 22, 2019 | Sep 19, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Feb 15, 2019 | Sep 19, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Jan 9, 2019 | Sep 19, 2018 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript to version 9.26-0.175.3.36.0.10.0 on Solaris 11.3Upgrade print/filter/ghostscript-core to version 9.26-11.4.5.0.1.2.0 on Solaris 11.4Upgrade print/filter/ghostscript to version 9.26-11.4.5.0.1.2.0 on Solaris 11.4Upgrade print/filter/ghostscript/fonts/gnu-gs-fonts-std to version 8.11-11.4.5.0.1.2.0 on Solaris 11.4Upgrade print/filter/ghostscript/fonts/gnu-gs-fonts-other to version 6.0-11.4.5.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Sep 19, 2018 |
| Oracle_linux | — | Upgrade ghostscriptUpgrade ghostscript-cupsUpgrade ghostscript-develUpgrade ghostscript-gtkUpgrade ghostscript-doc | Dec 18, 2018 | Sep 19, 2018 |
| Redhat_linux | — | Upgrade ghostscript-debuginfoUpgrade ghostscriptNo solution existsUpgrade ghostscript-develUpgrade ghostscript-docUpgrade ghostscript-gtkUpgrade ghostscript-cups | Dec 18, 2018 | Sep 19, 2018 |
| Suse | — | Upgrade ghostscriptUpgrade ghostscript-x11Upgrade ghostscript-miniUpgrade ghostscript-develUpgrade ghostscript-mini-develUpgrade libspectre1Upgrade libspectre-devel | Oct 3, 2018 | Sep 19, 2018 |
| Ubuntu | — | Upgrade libgs9Upgrade ghostscript | Oct 3, 2018 | Sep 19, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub