PT-2019-8030 · Artifex+1 · Artifex Ghostscript+1

Jasper Yu · Publicado 2019-05-23 · Atualizado 2019-05-27 · CVE-2017-15652

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript version 9.22

Description The issue allows an attacker to obtain sensitive information by opening a postscript file through Ghostscript. The affected components include the source code file, function, executable, and libga, which is also used by ImageMagick, making it affected as well.

Recommendations For Artifex Ghostscript version 9.22, consider restricting access to postscript files until a fix is available. As a temporary workaround, avoid using the affected libga component, which is also used by ImageMagick, to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-15652

Produtos afetados

Artifex Ghostscript

Imagemagick

Referências · 11

• 🔥 https://bugs.ghostscript.com/show_bug.cgi?id=698676 · Exploit
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=2fc463d0e · Nota
• https://ubuntu.com/security/CVE-2017-15652 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-15652 · Aviso do Fabricante
• http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=2fc463d0e · Nota
• https://security-tracker.debian.org/tracker/CVE-2017-15652 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-15652 · Nota de Segurança
• http://securityfocus.com/bid/108463 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-15652 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-15652 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-15652 · Nota de Segurança