First published: Mon Apr 03 2017(Updated: )
The intersect function in base/gxfill.c in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Ghostscript | =9.20 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-10219 is classified as a denial of service vulnerability due to a divide-by-zero error that can cause application crashes.
To fix CVE-2016-10219, you should update Artifex Software Ghostscript to a version later than 9.20 that addresses this vulnerability.
CVE-2016-10219 specifically affects Ghostscript version 9.20.
Yes, CVE-2016-10219 can be exploited remotely by sending a crafted file to the vulnerable Ghostscript application.
CVE-2016-10219 can lead to system instability by causing Ghostscript to crash, affecting any processes that depend on it.