CVE-2016-8602 in Ghostscript

Resumen (Inglés)

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2016-10-11

Divulgación

2017-04-14

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
99889	Ghostscript zht2.c .sethalftone5 escalada de privilegios	704	No está definido	Arreglo oficial	CVE-2016-8602

Fuentes

• MITRE
• NVD
• CVE Details