CVE-2017-15652

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript version 9.22

Description The issue allows an attacker to obtain sensitive information by opening a postscript file through Ghostscript. The affected components include the source code file, function, executable, and libga, which is also used by ImageMagick, making it affected as well.

Recommendations For Artifex Ghostscript version 9.22, consider restricting access to postscript files until a fix is available. As a temporary workaround, avoid using the affected libga component, which is also used by ImageMagick, to minimize the risk of exploitation.