CVE:CVE-2018-10194
CNNVD:CNNVD-201804-819
Artifex Ghostscript是美国Artifex Software公司的一款开源的PostScript（一种用于电子产业和桌面出版领域的页面描述语言和编程语言）解析器，它可显示Postscript文件以及在非Postscript打印机上打印Postscript文件。pdfwrite是其中的一个pdf写入组件。
Artifex Ghostscript 9.22及之前版本的pdfwrite组件中的devices/vector/gdevpdts.c的‘set_text_distance’函数存在缓冲区溢出漏洞。远程攻击者可借助特制的PDF文档利用该漏洞造成拒绝服务（应用程序崩溃）。
solution:Upgrade artifex ghostscript to a higher version than 9.22,and avoid the version (,9.22]; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,17.10,18.04,and avoid the version 14.04,16.04,17.10,18.04; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.5,7.7,and avoid the version 7.5,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0