PT-2017-18615 · Artifex · Artifex Ghostscript

Kamil Frankowicz · Publicado 2017-05-12 · Atualizado 2017-11-29 · CVE-2017-8908

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript version 9.21

Description The issue allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PostScript document. This is due to a problem in the mark line tr function in gxscanc.c.

Recommendations For Artifex Ghostscript version 9.21, consider updating to a newer version that contains a fix for this issue, as no specific workaround is provided for this version.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2017-8908

MGASA-2017-0430

Produtos afetados

Artifex Ghostscript

Referências · 10

• https://bugs.mageia.org/show_bug.cgi?id=22052 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-8908 · Nota de Segurança
• http://securityfocus.com/bid/98427 · Nota
• https://advisories.mageia.org/MGASA-2017-0430.html · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2017-8908 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-8908 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/2QUCMGMEGU4TK3I5424ZFZYFJHEQRF4P · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-8908 · Aviso do Fabricante
• https://bugs.ghostscript.com/show_bug.cgi?id=697810 · Correção
• https://osv.dev/vulnerability/MGASA-2017-0430 · Aviso do Fabricante