PT-2020-5555
CVE-2020-16296
·
Published
2020-08-13
·
Updated
2025-03-24
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Artifex Software GhostScript versions 9.50
Description
The issue is related to a buffer overflow in the
GetNumWrongData() function, located in contrib/lips4/gdevlips.c, which can be exploited by a remote attacker to cause a denial of service. This can be achieved via a crafted PDF file.Recommendations
For Artifex Software GhostScript version 9.50, update to version 9.51 to resolve the issue. As a temporary workaround, consider restricting the processing of crafted PDF files to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾