Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-16513

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact.

Published

2018-09-05T13:29:00.370

Last Modified

2024-11-21T03:52:53.147

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-704
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application artifex ghostscript < 9.24 Yes
Operating System canonical ubuntu_linux 14.04 Yes
Operating System canonical ubuntu_linux 16.04 Yes
Operating System canonical ubuntu_linux 18.04 Yes
Operating System debian debian_linux 8.0 Yes
Operating System debian debian_linux 9.0 Yes
Application artifex gpl_ghostscript < 9.26 Yes
Application pulsesecure pulse_connect_secure < 8.2r12.1 Yes
Application pulsesecure pulse_connect_secure < 8.3r7.1 Yes
Application pulsesecure pulse_connect_secure < 9.0r3.4 Yes
References