ghostscript is vulnerable to denial of service (DoS) attacks. The vulnerability exists as the set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PDF document.
CPE | Name | Operator | Version |
---|---|---|---|
ghostscript | eq | 9.07__28.el7_4.2 | |
ghostscript | eq | 9.07__20.el7_3.1 |