CVE-2016-9601

2018-04-2321:00:00

CWE-190

redhat

www.cve.org

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

6.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

JSON

ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_image function which is used to decode halftone segments in a JBIG2 image. A document (PostScript or PDF) with an embedded, specially crafted, jbig2 image could trigger a segmentation fault in ghostscript.

CNA Affected

[
  {
    "product": "ghostscript",
    "vendor": "unspecified",
    "versions": [
      {
        "status": "affected",
        "version": "ghostscript 0.14"
      }
    ]
  }
]