CVE-2017-9727
HighSummary
The gx_ttfReader__Read function in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service through heap-based buffer over-read, leading to application crash.
Risk Assessment
Attackers can exploit this vulnerability to remotely trigger application crashes, potentially leading to service availability interruptions.
Recommendation
It is recommended to update to the latest version of Ghostscript to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in Artifex Ghostscript GhostXPS 9.21
See all- CVE-2017-9740High
The xps_decode_font_char_imp function in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service through heap-based buffer over-read, leading to application crash. The attack can be executed via a crafted document.
- CVE-2017-9739High
The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.
- CVE-2017-9726High
The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.
- CVE-2017-9620High
The xps_select_font_encoding function in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service through heap-based buffer over-read and application crash via a crafted document.
- CVE-2017-9619High
The xps_true_callback_glyph_name function in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause an application crash via a crafted file.
- CVE-2017-9618High
The xps_load_sfnt_name function in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause an application crash via a crafted document due to a buffer overflow.
- CVE-2017-9612High
The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document.
- CVE-2017-9611High
The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.
- CVE-2017-9610High
The xps_load_sfnt_name function in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service through heap-based buffer over-read, leading to application crash. Other unspecified impacts may also be possible.
Original NVD description (English source)
The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.