Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer
overflow via the CIDFSubstPath and CIDFSubstFont parameters.
Author | Note |
---|---|
mdeslaur | per Debian, introduced by: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=316c3a08269212f1005709da64efcb383f8f5ce0 looks like this also introduced it: https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=9ebc7de2f18bb8b899f9298bdbc6b1a8fb66c6b5 |
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 24.04 | noarch | ghostscript | < 10.02.1~dfsg1-0ubuntu7.3 | UNKNOWN |