CVE

CVE-2017-8291

Artifex Ghostscript Type Confusion Vulnerability

Artifex · Ghostscript

Date added (CISA)

2022-05-24

Remediation due

2022-06-14

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile.