| Package | Affected versions | Patched versions |
|---|---|---|
| afpl ghostscript | = 6.0= 6.01= 6.50= 7.00= 7.03= 7.04= 8.00= 8.11= 8.12= 8.13= 8.14= 8.50= 8.51= 8.52= 8.53= 8.54 | |
| ghostscript fonts | = 6.0= 8.11 | |
| gpl ghostscript | = 8.01= 8.15= 8.50= 8.51= 8.54= 8.56= 8.57= 8.60= 8.61= 8.62= 8.63= 8.64≤ 8.70 |
Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a malformed TrueType font in a document that trigger an integer overflow and a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free