CVE-2020-15900
Critical
Description
A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'post' size resulted in a size that was too large, and could underflow to max uint32_t. This was fixed in commit 5d499272b95a6b890a1397e11d20937de000d31b.
SeverityCritical
CVSS9.8
Exploit probability—
ProductArtifex Ghostscript
PublishedJul 28, 2020
First seenJul 28, 2020
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| artifex ghostscript | 9.50, 9.52 | — |
| canonical ubuntu_linux | 20.04 | — |
| opensuse leap | 15.1, 15.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.