CVE-2017-7948

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via a crafted PostScript document.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.ghostscript.com/?p=ghostpdl.git%3Bh=8210a2864372723b49c526e2b102fdc00c9c4699
https://bugs.ghostscript.com/show_bug.cgi?id=697762Exploit, Issue Tracking, Patch, Vendor Advisory
https://security.gentoo.org/glsa/201811-12Third Party Advisory
http://git.ghostscript.com/?p=ghostpdl.git%3Bh=8210a2864372723b49c526e2b102fdc00c9c4699
https://bugs.ghostscript.com/show_bug.cgi?id=697762Exploit, Issue Tracking, Patch, Vendor Advisory
https://security.gentoo.org/glsa/201811-12Third Party Advisory

Timeline

Published: Apr 19, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-79505.5Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted PCX file.CVE-2017-79518.8WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context.CVE-2017-79528.8INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.CVE-2017-79535.4INFOR EAM V11.0 Build 201410 has XSS via comment fields.CVE-2017-79577.5XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'voi CVE-2017-79605.5The cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote attackers to cause a denial of service (heap-ba CVE-2017-79617.8The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an "outside the range of representable values of type long" CVE-2017-79625.5The iwgif_read_image function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of serv CVE-2017-79637.5The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause a denial of service (memory co CVE-2017-796410.0Zyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts, which makes it easier for remote attackers to CVE-2017-79657.3A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoMachine HVAC v2.1.0 fo CVE-2017-79668.8A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute