| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | ≤ 9.22 |
The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free