CVE-2016-8602: Incorrect Type Cast
If you call .sethalftone5 with an empty operand stack, ghostscript crashes. This flaw could be exploitable
Upstream bug : - Bug 697203 - NULL dereference in .sethalftone5 http://bugs.ghostscript.com/showbug.cgi?id=697203
Upstream patch : - Bug 697203: check for sufficient params in .sethalftone5 http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=f5c7555c303
Reference : http://seclists.org/oss-sec/2016/q4/98
Other sources
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-8602?
CVE-2016-8602 is considered a crash vulnerability that impacts the stability of the Ghostscript software.
How do I fix CVE-2016-8602?
To fix CVE-2016-8602, update Ghostscript to the latest version beyond 9.20 where this vulnerability has been addressed.
What software versions are affected by CVE-2016-8602?
Ghostscript versions up to and including 9.20 are affected by CVE-2016-8602.
Is CVE-2016-8602 exploitable?
Yes, CVE-2016-8602 could be exploited under specific conditions, particularly when an empty operand stack is used.
What happens when you call .sethalftone5 with an empty operand stack in CVE-2016-8602?
Calling .sethalftone5 with an empty operand stack leads to a crash of the Ghostscript application.