CVE-2017-9726: High severity ghostscript vulnerability
Published Jul 26, 2017
·Updated
The InsMDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.
Affected Software
3 affected components
Artifex Ghostscript GhostXPS=9.21
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Event History
Jul 26, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9726?
CVE-2017-9726 is classified as a moderate severity vulnerability due to its potential for denial of service and application crash.
2
How do I fix CVE-2017-9726?
To fix CVE-2017-9726, update to the latest version of Artifex Ghostscript GhostXPS that addresses this vulnerability.
3
What types of attacks can CVE-2017-9726 facilitate?
CVE-2017-9726 can facilitate remote denial of service attacks through crafted documents.
4
Which versions of Ghostscript are affected by CVE-2017-9726?
CVE-2017-9726 affects Artifex Ghostscript GhostXPS version 9.21.
5
Can CVE-2017-9726 affect Debian-based systems?
Yes, CVE-2017-9726 can impact Debian GNU/Linux versions 8.0 and 9.0.