CVE-2017-9216

概要

参考情報

• securityfocus.com/bid/98680 · Third Party Advisory
• bugs.ghostscript.com/show_bug.cgi · Exploit
• git.ghostscript.com
• lists.debian.org/debian-lts-announce/2021/10/msg00023.html · Mailing List

jbig2dec のその他の脆弱性

• CVE-2023-46361中 6.5Artifex Software jbig2dec v0.20 was discovered to contain a SEGV vulnerability via jbig2_error at /jbig2dec/jbig2.c.
• CVE-2020-12268緊急 9.8jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.
• CVE-2016-9601中 5.5ghostscript before version 9.21 is vulnerable to a heap based buffer overflow that was found in the ghostscript jbig2_decode_gray_scale_imag…
• CVE-2017-7976高 7.1Artifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the jbig2_image_compose function in jbig2_imag…
• CVE-2017-7975高 7.8Artifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer overflow in the jbig2_build_huffman_table f…