CVE-2018-16510
Summary
| CVE | CVE-2018-16510 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2018-09-05 06:29:00 UTC |
|---|
| Updated | 2023-11-07 02:53:00 UTC |
|---|
| Description | An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF primitives could be used by remote attackers able to supply crafted PDFs to crash the interpreter or possibly have unspecified other impact. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| git.ghostscript.com Git - ghostpdl.git/commit |
MISC |
git.ghostscript.com |
Third Party Advisory |
| USN-3768-1: Ghostscript vulnerabilities | Ubuntu security notices |
UBUNTU |
usn.ubuntu.com |
Third Party Advisory |
| oss-security - Re: Re: More Ghostscript Issues: Should we disable PS
coders in policy.xml by default? |
MISC |
openwall.com |
Issue Tracking, Mailing List, Patch, Third Party Advisory |
| 699671 – handling /undefined results in SEGV |
MISC |
bugs.ghostscript.com |
Issue Tracking, Permissions Required |
| USN-3773-1: Ghostscript vulnerabilities | Ubuntu security notices |
UBUNTU |
usn.ubuntu.com |
Third Party Advisory |
| GPL Ghostscript: Multiple vulnerabilities (GLSA 201811-12) — Gentoo security |
GENTOO |
security.gentoo.org |
Third Party Advisory |
| git.ghostscript.com Git - ghostpdl.git/commit |
|
git.ghostscript.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710304 Gentoo Linux GPL Ghostscript Multiple Vulnerabilities (GLSA 201811-12)
