Remote Code Execution Vulnerability in Artifex GSView on Windows
CVE-2017-14947

7.8HIGH

Key Information:

Vendor

Artifex
Status
Gsview
Vendor
CVE Published:
3 October 2022

What is CVE-2017-14947?

Artifex GSView 6.0 Beta for Windows contains a vulnerability that can be exploited through specially crafted .xps files. An attacker can cause a read access violation in the program, potentially leading to arbitrary code execution or denial of service. This vulnerability stems from the mishandling of data during the processing of block data moves, allowing attackers to manipulate how files are read and executed.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://bugs.ghostscript.com/show_bug.cgi?id=698551
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.