Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ghostscript | Sep 20, 2017 | Apr 27, 2017 | |
| Amazon_linux | — | amazon-linux-upgrade-ghostscript | Jun 7, 2017 | Apr 26, 2017 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Apr 27, 2017 | |
| Centos_linux | — | centos-upgrade-ghostscriptcentos-upgrade-ghostscript-cupscentos-upgrade-ghostscript-debuginfocentos-upgrade-ghostscript-develcentos-upgrade-ghostscript-doccentos-upgrade-ghostscript-gtk | May 19, 2017 | Apr 26, 2017 |
| Debian | debian-upgrade-ghostscript | May 7, 2017 | Apr 26, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-app-text-ghostscript-gpl | Oct 30, 2017 | Apr 26, 2017 | |
| Ghostscript | ghostscript-upgrade-9_21 | Oct 10, 2018 | Apr 27, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-ghostscripthuawei-euleros-2_0_sp1-upgrade-ghostscript-cups | Nov 30, 2017 | Apr 26, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-ghostscripthuawei-euleros-2_0_sp2-upgrade-ghostscript-cups | Nov 30, 2017 | Apr 26, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-print-filter-ghostscript-9-26-0-175-3-36-0-10-0oracle-solaris-11-4-upgrade-entire-11-4-11-4-0-0-1-15-0 | Oct 19, 2018 | Apr 26, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-ghostscriptoracle-linux-upgrade-ghostscript-cupsoracle-linux-upgrade-ghostscript-develoracle-linux-upgrade-ghostscript-docoracle-linux-upgrade-ghostscript-gtk | May 12, 2017 | Apr 26, 2017 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-ghostscriptredhat-upgrade-ghostscript-cupsredhat-upgrade-ghostscript-debuginforedhat-upgrade-ghostscript-develredhat-upgrade-ghostscript-docredhat-upgrade-ghostscript-gtk | May 12, 2017 | Apr 26, 2017 | |
| Suse | — | suse-upgrade-ghostscriptsuse-upgrade-ghostscript-develsuse-upgrade-ghostscript-fonts-othersuse-upgrade-ghostscript-fonts-russuse-upgrade-ghostscript-fonts-stdsuse-upgrade-ghostscript-ijs-develsuse-upgrade-ghostscript-librarysuse-upgrade-ghostscript-omnisuse-upgrade-ghostscript-x11suse-upgrade-libgimpprintsuse-upgrade-libgimpprint-devel | May 2, 2017 | Apr 26, 2017 |
| Ubuntu | ubuntu-upgrade-ghostscriptubuntu-upgrade-ghostscript-xubuntu-upgrade-libgs9ubuntu-upgrade-libgs9-common | Jul 1, 2017 | Apr 26, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub