| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | ≤ 9.20 |
The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free