Artifex Ghostscript Ghostxps vulnerabilities
9 vulnerabilities
Known vulnerabilities in Artifex Ghostscript Ghostxps, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-9612artifexghostscript_ghostxps+3
EPSS score2.46%
The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document.CVE-2017-9620artifexghostscript_ghostxps+1EPSS score1.76%
The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document, related to the xps_encode_font_char_imp function.CVE-2017-9727artifexghostscript_ghostxps+3EPSS score2.53%
The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.CVE-2017-9740artifexghostscript_ghostxps+1EPSS score1.79%
The xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.CVE-2017-9726artifexghostscript_ghostxps+3EPSS score2.75%
The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.CVE-2017-9619artifexghostscript_ghostxps+1EPSS score1.76%
The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (Segmentation Violation and application crash) via a crafted file.CVE-2017-9618artifexghostscript_ghostxps+1EPSS score2.10%
The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted document.CVE-2017-9610artifexghostscript_ghostxps+1EPSS score1.79%
The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.CVE-2017-9739artifexghostscript_ghostxps+3EPSS score2.53%
The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.