Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2018-16802
Description:An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix for CVE-2018-16509.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-16802
Debian Security Information: DSA-4294 (Google Search)
https://www.debian.org/security/2018/dsa-4294
https://security.gentoo.org/glsa/201811-12
http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=3e5d316b72e3965b7968bb1d96baa137cd063ac6
http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=643b24dbd002fb9c131313253c307cf3951b3d47
https://seclists.org/oss-sec/2018/q3/229
https://lists.debian.org/debian-lts-announce/2018/09/msg00015.html
https://seclists.org/oss-sec/2018/q3/228
RedHat Security Advisories: RHSA-2018:3834
https://access.redhat.com/errata/RHSA-2018:3834
https://usn.ubuntu.com/3768-1/




© 1998-2025 E-Soft Inc. All rights reserved.