CVE-2017-6196 describes multiple use-after-free vulnerabilities within the gx_image_enum_begin function of Ghostscript, specifically affecting versions prior to ecceafe3abba2714ef9b432035fe0739d9b1a283. This vulnerability, triggered by crafted PostScript documents, carries a high CVSS score of 7.8, indicating a significant risk of denial of service (application crash) and potential for other unspecified impacts. While the attack requires user interaction (UI:R) and local access (AV:L), the high impact on confidentiality, integrity, and availability (C:H/I:H/A:H) is concerning. There is currently no evidence of active exploitation, and no public exploit code or significant community discussion has been identified.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 8452f9238959a4d518af365812bf031fe4d8d4b7CPE matchmatch criteria | cpe:2.3:a:artifex:afpl_ghostscript:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.