An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. There is a buffer overflow during handling of a PDF XRef stream (related to W array values).
References
Configurations
History
14 Nov 2024, 02:01
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-120 | |
| References | () https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b1f0827c30f59a2dcbc8a39e42cace7a1de35f7f - Patch | |
| References | () https://github.com/ArtifexSoftware/ghostpdl/blob/master/doc/News.html - Product | |
| References | () https://bugs.ghostscript.com/show_bug.cgi?id=708001 - Permissions Required | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| First Time |
Artifex ghostscript
Artifex Debian Debian debian Linux |
|
| CPE | cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:* |
10 Nov 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-11-10 22:15
Updated : 2024-11-14 02:01
NVD link : CVE-2024-46952
Mitre link : CVE-2024-46952
JSON object : View
Products Affected
artifex
- ghostscript
debian
- debian_linux
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')