Improper Check for Unusual or Exceptional Conditions Affecting ArtifexSoftware/ghostpdl package, versions [,10.03.0rc1_test)


Severity

Recommended
0.0
high
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.04% (12th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-ARTIFEXSOFTWAREGHOSTPDL-6689321
  • published28 Apr 2024
  • disclosed27 Apr 2024
  • creditUnknown

Introduced: 27 Apr 2024

CVE-2023-52722  (opens in a new tab)
CWE-754  (opens in a new tab)

How to fix?

Upgrade ArtifexSoftware/ghostpdl to version 10.03.0rc1_test or higher.

Overview

Affected versions of this package are vulnerable to Improper Check for Unusual or Exceptional Conditions when handling eexec seeds other than the Type 1 standard in the zexE() and zexD() functions in psi/zmisc1.c when SAFER mode is enabled.

CVSS Scores

version 3.1