Artifex · Ghostscript
CVE-2017-8291
Artifex Ghostscript Type Confusion Vulnerability
What it is
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.
CISA: Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: June 14, 2022
- Added to the CISA list
- May 24, 2022
- Published
- April 27, 2017
- Severity
- High 7.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 97% in the top 0.1% of all known vulnerabilities
- Weakness
- CWE-704
- More details
- NVD · CVE.org · CISA
All references (10)
- http://www.debian.org/security/2017/dsa-3838
- https://access.redhat.com/errata/RHSA-2017:1230
- https://security.gentoo.org/glsa/201708-06
- https://bugzilla.suse.com/show_bug.cgi?id=1036453
- http://www.securityfocus.com/bid/98476
- https://www.exploit-db.com/exploits/41955/
- http://openwall.com/lists/oss-security/2017/04/28/2
- https://bugzilla.redhat.com/show_bug.cgi?id=1446063
- https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=04b37bbce174eed24edec7ad5b920eb93db4d47d
- https://bugs.ghostscript.com/show_bug.cgi?id=697808
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.