USN-8791-1: Ghostscript vulnerability
A Ghostscript vulnerability in JPEG 2000 image processing could allow arbitrary code execution via crafted files.
A vulnerability in Ghostscript was discovered where incorrect handling of JPEG 2000 image components with mismatched subsampling factors could allow an attacker to cause a crash or execute arbitrary code. Ubuntu has issued a security notice (USN-8791-1) for the flaw. The issue is triggered when processing specially crafted image files.
- Ghostscript flaw in JPEG 2000 handling could lead to code execution.
- Ubuntu has released a security notice for the vulnerability.
It was discovered that Ghostscript incorrectly handled JPEG 2000 image components with mismatched subsampling factors. An attacker could possibly use this issue to cause Ghostscript to crash or execute arbitrary code if it opened a specially crafted file.
This source does not provide full text. Read it at ubuntu.com.