CVE-2017-9835: Buffer Overflow
The gsallocrefarray function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PostScript document. This is related to a lack of an integer overflow check in base/gsalloc.c.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9835?
The severity of CVE-2017-9835 is considered high due to its potential to cause denial of service and application crashes.
How do I fix CVE-2017-9835?
To address CVE-2017-9835, update to a patched version of Ghostscript that resolves the buffer overflow vulnerability.
Which software is affected by CVE-2017-9835?
CVE-2017-9835 affects Artifex Ghostscript version 9.21 and specific versions of Debian Linux.
What type of vulnerability is CVE-2017-9835?
CVE-2017-9835 is a heap-based buffer overflow vulnerability that can lead to application crashes.
Can CVE-2017-9835 be exploited remotely?
Yes, CVE-2017-9835 can be exploited remotely through a crafted PostScript document.