CVE-2018-18073

6.3MEDIUM

Key Information

Vendor: Artifex
Status: Ghostscript
Vendor: CVE Published:; 15 October 2018

Summary

Artifex Ghostscript allows attackers to bypass a sandbox protection mechanism by leveraging exposure of system operators in the saved execution stack in an error object.

CVSS V3.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published.
Oct 15, 2018
Vulnerability Reserved.
Oct 9, 2018

Collectors

NVD DatabaseMitre Database