Artifex Ghostscript up to 9.52.x PDF Document gdevtxtw.c txtwrite out-of-bounds write

Summaryinfo

A vulnerability has been found in Artifex Ghostscript up to 9.52.x and classified as critical. This affects the function txtwrite of the file devices/vector/gdevtxtw.c of the component PDF Document Handler. The manipulation leads to out-of-bounds write. This vulnerability is referenced as CVE-2020-36773. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Artifex Ghostscript up to 9.52.x (Document Processing Software) and classified as critical. This issue affects the function txtwrite of the file devices/vector/gdevtxtw.c of the component PDF Document Handler. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. Using CWE to declare the problem leads to CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Artifex Ghostscript before 9.53.0 has an out-of-bounds write and use-after-free in devices/vector/gdevtxtw.c (for txtwrite) because a single character code in a PDF document can map to more than one Unicode code point (e.g., for a ligature).

The weakness was published 02/05/2024. It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2020-36773 since 02/04/2024. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit.

Upgrading to version 9.53.0 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch 8c7bd787defa071c96289b7da9397f673fddb874 is able to eliminate this problem. The bugfix is ready for download at git.ghostscript.com. The best possible mitigation is suggested to be upgrading to the latest version.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Document Processing Software

Vendor

• Artifex

Name

• Ghostscript

Version

• 9.0
• 9.1
• 9.2
• 9.3
• 9.4
• 9.5
• 9.6
• 9.7
• 9.8
• 9.9
• 9.10
• 9.11
• 9.12
• 9.13
• 9.14
• 9.15
• 9.16
• 9.17
• 9.18
• 9.19
• 9.20
• 9.21
• 9.22
• 9.23
• 9.24
• 9.25
• 9.26
• 9.27
• 9.28
• 9.29
• 9.30
• 9.31
• 9.32
• 9.33
• 9.34
• 9.35
• 9.36
• 9.37
• 9.38
• 9.39
• 9.40
• 9.41
• 9.42
• 9.43
• 9.44
• 9.45
• 9.46
• 9.47
• 9.48
• 9.49
• 9.50
• 9.51
• 9.52

License

• free

Website

• Vendor: https://artifex.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion