CVE-2018-18073

MEDIUM6.3

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object

Published Oct 15, 2018

Modified 1 years ago

Details

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.

References

WEB

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=34cc326eb2c5695833361887fe0b32e8d987741c

WEB

http://packetstormsecurity.com/files/149758/Ghostscript-Exposed-System-Operators.html

WEB

http://www.openwall.com/lists/oss-security/2018/10/10/12

ADVISORY

https://access.redhat.com/errata/RHSA-2018:3834

WEB

https://bugs.chromium.org/p/project-zero/issues/detail?id=1690

WEB