CVE-2017-15652 Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected....
MediumCVSS 5.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a postscript file though ghostscript. Because of imagemagick also use libga, so it was affected as well.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ghostscript(Debian:12) | < 9.25~dfsg-1 | 9.25~dfsg-1 |
| debian/ghostscript(Debian:13) | < 9.25~dfsg-1 | 9.25~dfsg-1 |
| debian/ghostscript(Debian:14) | < 9.25~dfsg-1 | 9.25~dfsg-1 |
| artifex ghostscript | = 9.22 | No fix listed |
References
- Debian Security Tracker CVE-2017-15652 vendor-advisory
- git.ghostscript.com
- 108463 vdb-entry
- bugs.ghostscript.com exploit patch vendor-advisory