USN-8791-1: Ghostscript vulnerability
A Ghostscript vulnerability in JPEG 2000 image processing could allow arbitrary code execution via crafted files.
A vulnerability in Ghostscript was discovered where incorrect handling of JPEG 2000 image components with mismatched subsampling factors could allow an attacker to cause a crash or execute arbitrary code. Ubuntu has issued a security notice (USN-8791-1) for the flaw. The issue is triggered when processing specially crafted image files.
- Ghostscript flaw in JPEG 2000 handling could lead to code execution.
- Ubuntu has released a security notice for the vulnerability.
- Vendors
- Ubuntu
- Products
- Ghostscript
From the original article
It was discovered that Ghostscript incorrectly handled JPEG 2000 image components with mismatched subsampling factors. An attacker could possibly use this issue to cause Ghostscript to crash or execute arbitrary code if it opened a specially crafted file.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.