ID CVE-2017-9620
Summary The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document, related to the xps_encode_font_char_imp function.
Vulnerable Configurations
  • cpe:2.3:a:artifex:ghostscript_ghostxps:9.21
Base: 6.8
  • Overread Buffers
    An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.
nessus via4
NASL family Gentoo Local Security Checks
description The remote host is affected by the vulnerability described in GLSA-201811-12 (GPL Ghostscript: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in GPL Ghostscript. Please review the CVE identifiers referenced below for additional information. Impact : A context-dependent attacker could entice a user to open a specially crafted PostScript file or PDF document using GPL Ghostscript possibly resulting in the execution of arbitrary code with the privileges of the process, a Denial of Service condition, or other unspecified impacts, Workaround : There is no known workaround at this time.
last seen 2019-02-21
modified 2018-12-07
plugin id 119132
published 2018-11-26
reporter Tenable
title GLSA-201811-12 : GPL Ghostscript: Multiple vulnerabilities
refmap via4
bid 99990
gentoo GLSA-201811-12
Last major update 26-07-2017 - 15:29
Published 26-07-2017 - 15:29
Last modified 02-10-2019 - 20:03
Back to Top