CVE-2016-10219: Divide by Zero

Published Apr 3, 2017

Updated

The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.

Affected Software

1 affected component

Artifex ghostscript=9.20

Remediation

Patch Available

https://bugs.ghostscript.com/show_bug.cgi?id=697453

Event History

Apr 3, 2017

CVE Published

via MITRE·05:44 AM

Data Sourced

via MITRE·05:44 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-10219?

CVE-2016-10219 is classified as a denial of service vulnerability due to a divide-by-zero error that can cause application crashes.

How do I fix CVE-2016-10219?

To fix CVE-2016-10219, you should update Artifex Software Ghostscript to a version later than 9.20 that addresses this vulnerability.

Which versions of Ghostscript are affected by CVE-2016-10219?

CVE-2016-10219 specifically affects Ghostscript version 9.20.

Can CVE-2016-10219 be exploited remotely?

Yes, CVE-2016-10219 can be exploited remotely by sending a crafted file to the vulnerable Ghostscript application.

What impact does CVE-2016-10219 have on system stability?

CVE-2016-10219 can lead to system instability by causing Ghostscript to crash, affecting any processes that depend on it.