CVE-2017-9612: Use After Free
The InsIP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a crafted document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9612?
CVE-2017-9612 has been classified as a denial of service vulnerability, allowing for application crashes.
How do I fix CVE-2017-9612?
To fix CVE-2017-9612, update to the latest version of Artifex Ghostscript GhostXPS or any patched version provided by your distribution.
What systems are affected by CVE-2017-9612?
CVE-2017-9612 affects Artifex Ghostscript GhostXPS version 9.21 and Debian Linux versions 8.0 and 9.0.
Can CVE-2017-9612 lead to data loss?
While CVE-2017-9612 primarily results in a denial of service, it could potentially lead to data loss depending on application handling.
What can attackers achieve with CVE-2017-9612?
Attackers can exploit CVE-2017-9612 to crash the application by using a crafted document.