CVE-2019-3835 is a medium-severity vulnerability in Ghostscript versions prior to 9.27, affecting products from Artifex, Debian, Fedora, openSUSE, and Red Hat. It allows a specially crafted PostScript file to bypass sandbox restrictions and access the file system due to the availability of the 'superexec' operator. The vulnerability has a CVSS score of 5.5, indicating a local attack vector with low complexity, requiring user interaction, and potentially leading to high confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 9.27CPE matchmatch criteria | cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:* | ||
3.3CPE matchmatch criteria | cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* | ||
7.6CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.