| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | ≤ 9.23 | |
| gpl ghostscript | < 9.26 | 9.26 |
| pulse connect secure | ≥ 8.2r1.0, < 8.2r12.1≥ 8.3r1, < 8.3r7.1≥ 9.0r1, < 9.0r3.4 | 8.2r12.18.3r7.19.0r3.4 |
In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free