Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute arbitrary code in the context of the Ghostscript process. This is a type confusion issue because of failure to check whether the Implementation of a pattern dictionary was a structure type.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Artifex Software Ghostscript 安全漏洞
Vulnerability Description
Artifex Software Ghostscript是美国Artifex Software公司的一款开源的PostScript（一种用于电子产业和桌面出版领域的页面描述语言和编程语言）解析器，它可显示Postscript文件以及在非Postscript打印机上打印Postscript文件。 Artifex Software Ghostscript 9.25及之前版本中的setpattern存在类型混淆漏洞，该漏洞源于程序没有正确的验证类型。远程攻击者可借助特制的PS或PDF文件利用该漏洞造成Ghost
CVSS Information
N/A
Vulnerability Type
N/A