Lucene search

K
redhatcveRedhat.comRH:CVE-2018-10194
HistoryApr 20, 2018 - 3:18 a.m.

CVE-2018-10194

2018-04-2003:18:37
redhat.com
access.redhat.com
15

0.973 High

EPSS

Percentile

99.9%

The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.

Mitigation

Please refer to the "Mitigation" section of CVE-2018-16509 : <https://access.redhat.com/security/cve/cve-2018-16509&gt;