An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in ztype could be used by remote attackers able to supply crafted PostScript to crash the interpreter or possibly have unspecified other impact.
The product does not correctly convert an object, resource, or structure from one type to a different type.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Debian_linux | Debian | 8.0 (including) | 8.0 (including) |
Debian_linux | Debian | 9.0 (including) | 9.0 (including) |
Red Hat Enterprise Linux 7 | RedHat | ghostscript-0:9.07-31.el7_6.1 | * |
Ghostscript | Ubuntu | bionic | * |
Ghostscript | Ubuntu | devel | * |
Ghostscript | Ubuntu | trusty | * |
Ghostscript | Ubuntu | upstream | * |
Ghostscript | Ubuntu | xenial | * |