ByteOS Network

NVD Vulnerability Details :

CVE-2016-8602

Deferred

Source-cve@mitre.org

Published At-14 Apr, 2017 | 18:59

Updated At-20 Apr, 2025 | 01:37

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Artifex Software Inc.

>>ghostscript>>Versions up to 9.20(inclusive)

cpe:2.3:a:artifex:ghostscript:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-704	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=f5c7555c303	cve@mitre.org	N/A
http://rhn.redhat.com/errata/RHSA-2017-0013.html	cve@mitre.org	N/A
http://rhn.redhat.com/errata/RHSA-2017-0014.html	cve@mitre.org	N/A
http://www.debian.org/security/2016/dsa-3691	cve@mitre.org	N/A
http://www.openwall.com/lists/oss-security/2016/10/11/5	cve@mitre.org	Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/11/7	cve@mitre.org	Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/95311	cve@mitre.org	Third Party Advisory VDB Entry
https://bugs.ghostscript.com/show_bug.cgi?id=697203	cve@mitre.org	Issue Tracking Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1383940	cve@mitre.org	Issue Tracking Patch
https://ghostscript.com/doc/9.21/History9.htm	cve@mitre.org	Patch Vendor Advisory
https://security.gentoo.org/glsa/201702-31	cve@mitre.org	N/A
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=f5c7555c303	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2017-0013.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://rhn.redhat.com/errata/RHSA-2017-0014.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2016/dsa-3691	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2016/10/11/5	af854a3a-2127-422b-91ae-364da2661108	Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/11/7	af854a3a-2127-422b-91ae-364da2661108	Mailing List Patch Third Party Advisory
http://www.securityfocus.com/bid/95311	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://bugs.ghostscript.com/show_bug.cgi?id=697203	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch
https://bugzilla.redhat.com/show_bug.cgi?id=1383940	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Patch
https://ghostscript.com/doc/9.21/History9.htm	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://security.gentoo.org/glsa/201702-31	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History