tocsin

Debian/ghostscript: unknown

The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer ov

Action: Upgrade ghostscript to 8.64~dfsg-2 or later.

Affected

introducedfixedlast affected
08.64~dfsg-2-

Fixed versions

8.64~dfsg-2

Sources

published · modified · JSON