High severity7.8NVD Advisory· Published Jul 26, 2017· Updated May 13, 2026
CVE-2017-9610
CVE-2017-9610
Description
The xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.
Affected products
1- cpe:2.3:a:artifex:ghostscript_ghostxps:9.21:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- bugs.ghostscript.com/show_bug.cginvdExploitIssue TrackingThird Party Advisory
- www.securityfocus.com/bid/99976nvdThird Party AdvisoryVDB Entry
- security.gentoo.org/glsa/201811-12nvdThird Party Advisory
News mentions
0No linked articles in our index yet.