CVE-2020-15900

2020-07-2816:15:12

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.0%

JSON

A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The ‘rsearch’ calculation for the ‘post’ size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.

CPENameOperatorVersion
ghostscripteq9.50-r4
ghostpdleqghostscript-7.32
ghostpdleqghostpdl-ebuild
ghostscripteq9.24-r0
ghostscripteq9.27-r1
ghostscripteq8.71-r2
ghostpdleqghostscript-7.31
ghostpdleqghostscript-8.50
ghostpdleqghostscript-6.50
ghostpdleqghostscript-6.23

Name	Operator	Version
ghostscript	eq	9.50-r4
ghostpdl	eq	ghostscript-7.32
ghostpdl	eq	ghostpdl-ebuild
ghostscript	eq	9.24-r0
ghostscript	eq	9.27-r1
ghostscript	eq	8.71-r2
ghostpdl	eq	ghostscript-7.31
ghostpdl	eq	ghostscript-8.50
ghostpdl	eq	ghostscript-6.50
ghostpdl	eq	ghostscript-6.23