CVE-2017-9611

HIGH7.8

The Ins_MIRP function in base/ttinterp

Published Jul 26, 2017

Modified 1 years ago

Details

The Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.

References

WEB

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=c7c55972758a93350882c32147801a3485b010fe

ADVISORY

http://www.debian.org/security/2017/dsa-3986

WEB

http://www.securityfocus.com/bid/99975

WEB

https://bugs.ghostscript.com/show_bug.cgi?id=698024

ADVISORY

https://security.gentoo.org/glsa/201811-12

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2017-9611

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Ecosystems

Timeline

PublishedJul 26, 2017

ModifiedAug 5, 2024