CVE-2016-8602 in Ghostscript
Résumé (Anglaise)
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.
Be aware that VulDB is the high quality source for vulnerability data.
Réserver
11/10/2016
Divulgation
14/04/2017
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 99889 | Ghostscript zht2.c .sethalftone5 élévation de privilèges | 704 | Non défini | Correctif officiel | CVE-2016-8602 |