PT-2017-7814 · Artifex+2 · Ghostscript+2
Kamil Frankowicz
·
Publicado
2017-04-03
·
Atualizado
2024-06-15
·
CVE-2016-10217
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Ghostscript version 9.20
Description
The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, via a crafted file that is mishandled in the color management module. This occurs due to a problem in the pdf14 open function in the base/gdevp14.c file.
Recommendations
For Ghostscript version 9.20, consider avoiding the use of the pdf14 open function until a patch is available. As a temporary workaround, restrict the processing of crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Correção
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Ghostscript
Ubuntu