CVE-2018-15909: Incorrect Type Cast
In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.
Other sources
It was discovered that the ghostscript .shfill operator did not properly validate certain types. A specially crafted PostScript document could exploit this to crash ghostscript or, possibly, execute arbitrary code in the context of the ghostscript process.
Patch: http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=0b6cd1918e1ec4ffd087400a754a845180a4522b
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-15909?
CVE-2018-15909 is a vulnerability in Artifex Ghostscript versions 9.23 before 2018-08-24 that allows attackers to crash the interpreter or potentially execute code by exploiting a type confusion using the .shfill operator.
How severe is CVE-2018-15909?
CVE-2018-15909 has a severity rating of 7.8, which is considered high.
Which software versions are affected by CVE-2018-15909?
Artifex Ghostscript versions 9.23 before 2018-08-24 are affected by CVE-2018-15909.
How can CVE-2018-15909 be fixed?
To fix CVE-2018-15909, users should update to a patched version of Artifex Ghostscript, specifically version 9.24 or later.
Where can I find more information about CVE-2018-15909?
More information about CVE-2018-15909 can be found on the CVE website (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15909), the CERT Vulnerability Notes Database (https://www.kb.cert.org/vuls/id/332928), and the Ubuntu security notices (https://ubuntu.com/security/notices/USN-3768-1).