Priority LOW 38
The xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspec…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01785 · Published 2017-07-26 · Will not fix CWE-125
Priority LOW 39
The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other im…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02529 · Published 2017-07-26 · Will not fix CWE-125
Priority LOW 39
The gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02529 · Published 2017-07-26 · Will not fix CWE-125
Priority LOW 39
The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other im…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0275 · Published 2017-07-26 · Will not fix CWE-125
Priority LOW 38
The xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspec…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01762 · Published 2017-07-26 · Will not fix CWE-125
Priority LOW 38
The xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (Segmentation Violation and application crash) via a crafted file.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01762 · Published 2017-07-26 · Will not fix CWE-119
Priority LOW 38
The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02097 · Published 2017-07-26 · Will not fix CWE-119
Priority LOW 39
The Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via a craf…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.02458 · Published 2017-07-26 · Will not fix CWE-416
Priority LOW 38
The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01785 · Published 2017-07-26 · Will not fix CWE-125