CVE-2020-15900
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 5.2%
A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.
Produtos afetados
n/a · n/aReferências
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=loghttp://lists.opensuse.org/opensuse-security-announce/2020-08/msg00004.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-08/msg00006.htmlhttps://artifex.com/security-advisories/CVE-2020-15900https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=5d499272b95a6b890a1397e11d20937de000d31bhttps://github.com/ArtifexSoftware/ghostpdl/commit/5d499272b95a6b890a1397e11d20937de000d31bhttps://github.com/ArtifexSoftware/ghostpdl/commits/master/psi/zstring.chttps://security.gentoo.org/glsa/202008-20https://usn.ubuntu.com/4445-1/