CVE-2017-9611: High severity Artifex Ghostscript vulnerability
Published Jul 26, 2017
·Updated
The InsMIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.
Affected Software
3 affected components
Artifex Ghostscript=9.21
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Event History
Jul 26, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9611?
CVE-2017-9611 has a high severity due to its potential for causing denial of service and application crashes.
2
How do I fix CVE-2017-9611?
To remedy CVE-2017-9611, update to a patched version of Ghostscript beyond 9.21.
3
What impact can CVE-2017-9611 have on my system?
CVE-2017-9611 can lead to a denial of service through a heap-based buffer over-read and potential application crashes.
4
Is CVE-2017-9611 exploitable by remote attackers?
Yes, CVE-2017-9611 can be exploited by remote attackers using a specially crafted document.
5
Which software versions are affected by CVE-2017-9611?
CVE-2017-9611 affects Artifex Ghostscript version 9.21 and specific Debian Linux versions 8.0 and 9.0.