The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted document.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "9.10~dfsg-0ubuntu10.10",
"binary_name": "ghostscript"
},
{
"binary_version": "9.10~dfsg-0ubuntu10.10",
"binary_name": "ghostscript-x"
},
{
"binary_version": "9.10~dfsg-0ubuntu10.10",
"binary_name": "libgs-dev"
},
{
"binary_version": "9.10~dfsg-0ubuntu10.10",
"binary_name": "libgs9"
},
{
"binary_version": "9.10~dfsg-0ubuntu10.10",
"binary_name": "libgs9-common"
}
]
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "9.18~dfsg~0-0ubuntu2.7",
"binary_name": "ghostscript"
},
{
"binary_version": "9.18~dfsg~0-0ubuntu2.7",
"binary_name": "ghostscript-x"
},
{
"binary_version": "9.18~dfsg~0-0ubuntu2.7",
"binary_name": "libgs-dev"
},
{
"binary_version": "9.18~dfsg~0-0ubuntu2.7",
"binary_name": "libgs9"
},
{
"binary_version": "9.18~dfsg~0-0ubuntu2.7",
"binary_name": "libgs9-common"
}
]
}