PT-2018-2506

CVE-2018-19476

Published

2018-11-14

Updated

2024-06-15

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 9.26

Description The issue is related to a type confusion in the setcolorspace, allowing remote attackers to bypass intended access restrictions. This is due to errors in the setcolorspace type. The exploitation of this issue may enable a remote attacker to circumvent established access control.

Recommendations For Ghostscript versions prior to 9.26, update to version 9.26 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Vendors