CVE-2017-8291

Advisory lineage Upstream: 0 Downstream: 13
Analyzed
Published: 27 Apr 2017, 01:41
Last modified:21 Oct 2025, 23:55

Vulnerability Summary

Overall Risk (default)
high
60/100
CVSS Score
7.8 HIGH
v3.1 (cve.org)
EPSS Score
92.93% CRITICAL
93% probability +0.07%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
3 found
Dark Web
Not detected

Timeline

27 Apr 2017, 01:41
Published
Vulnerability first disclosed
24 May 2022, 00:00
Added to CISA KEV
Artifex Ghostscript Type Confusion Vulnerability
14 Jun 2022, 00:00
CISA Remediation Due
Apply updates per vendor instructions.
21 Oct 2025, 23:55
Last Modified
Vulnerability information updated

Description

Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • v2.0•MEDIUM•Score: 6.8AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 92.93%• Percentile: 100%

Techniques & Countermeasures

  • CWE-843•Access of Resource Using Incompatible Type ('Type Confusion')

    The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Affected Systems

  • Unknown•Ghostscript

    < 9.21

  • debian•debian_linux

    8.0

  • redhat•enterprise_linux_desktop

    6.0 | 7.0

  • redhat•enterprise_linux_eus

    7.3 | 7.4 | 7.5 | 7.6 | 7.7

  • redhat•enterprise_linux_server

    6.0 | 7.0

  • redhat•enterprise_linux_server_aus

    7.3 | 7.4 | 7.6 | 7.7

  • redhat•enterprise_linux_server_tus

    7.3 | 7.6 | 7.7

  • redhat•enterprise_linux_workstation

    6.0 | 7.0

References (11)