CVE-2016-10317

Name of the Vulnerable Software and Affected Versions Ghostscript version 9.20

Description The issue is related to the fill threshhold buffer function in base/gxht thresh.c, which allows remote attackers to cause a denial of service or possibly have other impacts via a crafted PostScript document. This is due to a heap-based buffer overflow. The exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service.

Recommendations For Ghostscript version 9.20, consider disabling the fill threshhold buffer function as a temporary workaround until a patch is available. Restrict access to crafted PostScript documents to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.