CWE-119

CWE-125

https://security.gentoo.org/glsa/201811-12 No Types Assigned

https://security.gentoo.org/glsa/201811-12 Third Party Advisory

https://security.gentoo.org/glsa/201811-12 [No Types Assigned]

OR
     *cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-119

http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=3ee55637480d5e319a5de0481b01c3346855cbc9 No Types Assigned

http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=3ee55637480d5e319a5de0481b01c3346855cbc9 Third Party Advisory

http://www.securityfocus.com/bid/99990 No Types Assigned

http://www.securityfocus.com/bid/99990 Third Party Advisory, VDB Entry

https://bugs.ghostscript.com/show_bug.cgi?id=698050 No Types Assigned

https://bugs.ghostscript.com/show_bug.cgi?id=698050 Exploit, Issue Tracking, Third Party Advisory

The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.22 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document, related to the xps_encode_font_char_imp function.

The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document, related to the xps_encode_font_char_imp function.

http://www.securityfocus.com/bid/99990 [No Types Assigned]