CVE-2017-9610
CVE-2017-9610
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.
CVSS 7.8 · High · EPSS 1.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ghostscript Debian:12
- Affected ranges
- ECOSYSTEM: < 9.22~dfsg-1
Update to 9.22~dfsg-1
ghostscript Debian:13
- Affected ranges
- ECOSYSTEM: < 9.22~dfsg-1
Update to 9.22~dfsg-1
ghostscript Debian:14
- Affected ranges
- ECOSYSTEM: < 9.22~dfsg-1
Update to 9.22~dfsg-1