| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | < 9.24 | 9.24 |
| gpl ghostscript | < 9.26 | 9.26 |
| pulse connect secure | ≥ 8.2r1.0, < 8.2r12.1≥ 8.3r1, < 8.3r7.1≥ 9.0r1, < 9.0r3.4 | 8.2r12.18.3r7.19.0r3.4 |
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free