Type Confusion Vulnerability in Artifex Ghostscript 9.23

CVE-2018-15909 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers able to supply crafted PostScript files to crash the interpreter or potentially execute code.

Learn more about our Web Application Penetration Testing UK.