CVE-2017-15652

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-05-23 · updated 2026-06-17
Weakness: CWE-200

Description

Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga (imagemagick used that). The attack vector is: Someone must open a postscript file though ghostscript. Because of imagemagick also use libga, so it was affected as well.

Affected products

Artifex Ghostscript: 9.22

References

http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=2fc463d0e
http://www.securityfocus.com/bid/108463
https://bugs.ghostscript.com/show_bug.cgi?id=698676
http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=2fc463d0e
http://www.securityfocus.com/bid/108463
https://bugs.ghostscript.com/show_bug.cgi?id=698676

Get alerted when CVE-2017-15652 or the next vulnerability affects your stack