CVE-2017-8291

CVE-2017-8291 is a critical type confusion vulnerability in Artifex Ghostscript versions through 2017-04-26, affecting products like Debian and Red Hat. This flaw allows for a -dSAFER bypass and remote command execution through a crafted .eps document containing a specific substring, which is then processed by the gs program. The vulnerability carries a CVSS score of 7.8 (HIGH), indicating a high-impact local attack requiring user interaction, with potential for complete compromise of confidentiality, integrity, and availability. Its EPSS score of 0.92676, FAUCET Risk Score of 100/100, and inclusion in the KEV catalog highlight its severe risk. CVE-2017-8291 was actively exploited in the wild in April 2017, with readily available exploit modules in Metasploit and an ExploitDB entry. It garnered significant community discussion and media coverage, including reports of its use by threat actors like RedEyes hackers, underscoring its real-world impact.