CVE Catalog
CVE-2023-38560
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.34%
26th percentile - higher than 26% of all known CVEs
Summary
An integer overflow flaw was found in pl_glyph_name in Ghostscript, which may allow a local attacker to cause a denial of service by transforming a crafted PCL file to PDF format.
Risk Assessment
An attacker could exploit this vulnerability to disrupt system operations, potentially leading to service downtime.
Recommendation
It is recommended to update Ghostscript to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
An integer overflow flaw was found in pcl/pl/plfont.c:418 in pl_glyph_name in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format.