In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the setcolor function to crash the interpreter or possibly have unspecified other impact.
[
{
"events": [
{
"introduced": "0"
},
{
"fixed": "9.24"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "14.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "16.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "18.04"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "8.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "9.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "9.26"
}
]
},
{
"events": [
{
"introduced": "8.2r1.0"
},
{
"fixed": "8.2r12.1"
}
]
},
{
"events": [
{
"introduced": "8.3r1"
},
{
"fixed": "8.3r7.1"
}
]
},
{
"events": [
{
"introduced": "9.0r1"
},
{
"fixed": "9.0r3.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"fixed": "9.24"
}
]
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-16513.json"