PT-2016-7789 · Artifex+3 · Ghostscript+3
Bingchang Liu
·
Publicado
2016-12-31
·
Atualizado
2024-08-19
·
CVE-2016-9601
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
ghostscript versions prior to 9.21
Description
The issue is related to a heap-based buffer overflow found in the
jbig2 decode gray scale image function, which is used for decoding halftone segments in JBIG2 images. A document, such as PostScript or PDF, containing a specially crafted JBIG2 image could trigger a segmentation fault in ghostscript.Recommendations
For versions prior to 9.21, update to version 9.21 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the
jbig2 decode gray scale image function until a patch is available. Restrict access to documents with embedded JBIG2 images to minimize the risk of exploitation.Correção
Buffer Overflow
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Suse
Ubuntu
Ghostscript