CVE-2018-18073: Infoleak
Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-18073?
CVE-2018-18073 is a vulnerability in Artifex Ghostscript that allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.
What is the severity of CVE-2018-18073?
The severity of CVE-2018-18073 is high with a severity value of 6.3.
Which software is affected by CVE-2018-18073?
Artifex Ghostscript versions up to and including 9.26, Debian Linux versions 8.0 and 9.0, and various Ubuntu and Redhat Enterprise Linux versions are affected by CVE-2018-18073.
How do I fix CVE-2018-18073 in Artifex Ghostscript?
To fix CVE-2018-18073 in Artifex Ghostscript, update to version 9.27 or later.
Where can I find more information about CVE-2018-18073?
You can find more information about CVE-2018-18073 at the following references: [link1], [link2], [link3].