Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-10217

Опубликовано: 03 апр. 2017
Источник: debian
EPSS Низкий

Описание

The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
ghostscriptfixed9.20~dfsg-3.1package
ghostscriptnot-affectedjessiepackage
ghostscriptnot-affectedwheezypackage

Примечания

  • https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=90fd0c7ca3efc1ddff64a86f4104b13b3ac969eb

  • https://bugs.ghostscript.com/show_bug.cgi?id=697456

EPSS

Процентиль: 72%
0.00734
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 9 лет назад

The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.

CVSS3: 3.3
redhat
около 9 лет назад

The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.

CVSS3: 5.5
nvd
почти 9 лет назад

The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.

CVSS3: 5.5
github
больше 3 лет назад

The pdf14_open function in base/gdevp14.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted file that is mishandled in the color management module.

EPSS

Процентиль: 72%
0.00734
Низкий