Denial Of Service (DoS)

2019-01-1508:57:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.041 Low

EPSS

Percentile

92.2%

JSON

Ghostscript is vulnerable to denial of service. An integer overflow, which results in a heap-based buffer overflow in the icmLut_allocate function in icclib allows an attacker to crash the application or possibly execute arbitrary code via a malicious PostScript or PDF file with embedded images.

CPENameOperatorVersion
ghostscripteq8.70__6.el5_7.3
ghostscripteq8.15.2__9.4.el5_3.4
ghostscripteq8.15.2__9.1.el5_1.1
ghostscripteq8.15.2__9.12.el5_5
ghostscripteq8.70__6.el5_7.6
ghostscripteq8.15.2__9.1.el5
ghostscripteq8.70__6.el6
ghostscripteq8.70__11.el6_1.2
ghostscripteq8.15.2__9.4.el5
ghostscripteq8.70__11.el6

Name	Operator	Version
ghostscript	eq	8.70__6.el5_7.3
ghostscript	eq	8.15.2__9.4.el5_3.4
ghostscript	eq	8.15.2__9.1.el5_1.1
ghostscript	eq	8.15.2__9.12.el5_5
ghostscript	eq	8.70__6.el5_7.6
ghostscript	eq	8.15.2__9.1.el5
ghostscript	eq	8.70__6.el6
ghostscript	eq	8.70__11.el6_1.2
ghostscript	eq	8.15.2__9.4.el5
ghostscript	eq	8.70__11.el6