Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ghostscript | Sep 20, 2017 | Apr 27, 2017 |
| Amazon_linux | — | Upgrade ghostscript | Jun 7, 2017 | Apr 26, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 27, 2017 |
| Centos_linux | — | Upgrade ghostscriptUpgrade ghostscript-docUpgrade ghostscript-cupsUpgrade ghostscript-gtkUpgrade ghostscript-develUpgrade ghostscript-debuginfo | May 19, 2017 | Apr 26, 2017 |
| Debian | — | Upgrade ghostscript | May 7, 2017 | Apr 26, 2017 |
| Gentoo Linux | — | Upgrade app-text/ghostscript-gpl. | Oct 30, 2017 | Apr 26, 2017 |
| Ghostscript | — | Upgrade to Ghostscript version 9.21 | Oct 10, 2018 | Apr 27, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade ghostscriptUpgrade ghostscript-cups | Nov 30, 2017 | Apr 26, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ghostscript-cupsUpgrade ghostscript | Nov 30, 2017 | Apr 26, 2017 |
| Oracle Solaris | — | Upgrade print/filter/ghostscript to version 9.26-0.175.3.36.0.10.0 on Solaris 11.3Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Apr 26, 2017 |
| Oracle_linux | — | Upgrade ghostscript-gtkUpgrade ghostscript-cupsUpgrade ghostscript-develUpgrade ghostscript-docUpgrade ghostscript | May 12, 2017 | Apr 26, 2017 |
| Redhat_linux | — | Upgrade ghostscript-cupsUpgrade ghostscript-debuginfoUpgrade ghostscript-develUpgrade ghostscript-gtkUpgrade ghostscript-docUpgrade ghostscriptNo solution exists | May 12, 2017 | Apr 26, 2017 |
| Suse | — | Upgrade libgimpprint-develUpgrade ghostscript-libraryUpgrade ghostscript-fonts-stdUpgrade ghostscript-develUpgrade ghostscript-x11Upgrade ghostscript-fonts-otherUpgrade libgimpprintUpgrade ghostscript-omniUpgrade ghostscript-fonts-rusUpgrade ghostscript-ijs-develUpgrade ghostscript | May 2, 2017 | Apr 26, 2017 |
| Ubuntu | — | Upgrade libgs9-commonUpgrade ghostscript-xUpgrade ghostscriptUpgrade libgs9 | Jul 1, 2017 | Apr 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub