In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute arbitrary code in the context of the Ghostscript process. This is a type confusion issue because of failure to check whether the Implementation of a pattern dictionary was a structure type.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "ghostscript" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "ghostscript-dbg" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "ghostscript-dbgsym" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "ghostscript-doc" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "ghostscript-x" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "ghostscript-x-dbgsym" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "libgs-dev" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "libgs-dev-dbgsym" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "libgs9" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "libgs9-common" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.14.04.1", "binary_name": "libgs9-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "ghostscript" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "ghostscript-dbg" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "ghostscript-dbgsym" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "ghostscript-doc" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "ghostscript-x" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "ghostscript-x-dbgsym" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "libgs-dev" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "libgs-dev-dbgsym" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "libgs9" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "libgs9-common" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.16.04.1", "binary_name": "libgs9-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.1", "binary_name": "ghostscript" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.1", "binary_name": "ghostscript-dbg" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.1", "binary_name": "ghostscript-doc" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.1", "binary_name": "ghostscript-x" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.1", "binary_name": "libgs-dev" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.1", "binary_name": "libgs9" }, { "binary_version": "9.26~dfsg+0-0ubuntu0.18.04.1", "binary_name": "libgs9-common" } ] }