← Vulnerability feed

Vulnerability record · CVE-2017-6196 · published 24 February 2017

CVE-2017-6196: Artifex afpl ghostscript use after free vulnerability

Artifex · Afpl Ghostscript

Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document.

7.8 CVSS 3.0 High EPSS 1.8% · top 22.2% CWE-416 · Use after free
7.8CVSS 3.0 base score, v2 6.8
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
17 Jun 2026Last modified by NVD

Description

Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432035fe0739d9b1a283 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document.

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://git.ghostscript.com/?p=ghostpdl.git%3Bh=ecceafe3abba2714ef9b432035fe0739d9b1a283
http://www.securityfocus.com/bid/96428
http://www.securitytracker.com/id/1037899
https://bugs.ghostscript.com/show_bug.cgi?id=697596 Issue TrackingPatch
https://security.gentoo.org/glsa/201708-06
http://git.ghostscript.com/?p=ghostpdl.git%3Bh=ecceafe3abba2714ef9b432035fe0739d9b1a283
http://www.securityfocus.com/bid/96428
http://www.securitytracker.com/id/1037899
https://bugs.ghostscript.com/show_bug.cgi?id=697596 Issue TrackingPatch
https://security.gentoo.org/glsa/201708-06

Track CVE-2017-6196 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2009-3743Artifex afpl ghostscript vulnerabilityOff-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 allows remote attackers to execute arbitr…EPSS 6.8%9.3CVE-2009-4897Artifex afpl ghostscript memory buffer overflow vulnerabilityBuffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (mem…EPSS 6.6%7.2CVE-2010-2055Artifex afpl ghostscript vulnerabilityGhostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript …EPSS 0.51%6.8CVE-2015-3228Artifex afpl ghostscript vulnerabilityInteger overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to cause a denial of …EPSS 3.7%5.5CVE-2013-5653Artifex afpl ghostscript information exposure vulnerabilityThe getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted p…EPSS 2.0%4.3CVE-2010-4054Artifex afpl ghostscript memory buffer overflow vulnerabilityThe gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application cr…EPSS 2.6%7.0CVE-2026-68820Windows Ancillary Function Driver for WinSock use-after-free privilege escalationThe Windows Ancillary Function Driver for WinSock (afd.sys) contains a use-after-free (CWE-416) that lets an authorized local attacker elevate privil…KEVEPSS 0.33%analysed8.8CVE-2010-0806Microsoft Internet Explorer Peer Objects use-after-free allows remote code executionInternet Explorer 6, 6 SP1 and 7 contain a use-after-free in the Peer Objects component (iepeers.dll), where an object is accessed after deletion, le…KEVEPSS 82%analysed

Source: NIST National Vulnerability Database (record CVE-2017-6196), CISA KEV, FIRST EPSS (scores of 2026-09-30). This page is refreshed as NVD updates the record.