CVE-2017-11714

psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted PostScript document, related to an out-of-bounds read in the igc_reloc_struct_ptr function in psi/igc.c.

• CWE-125

• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=671fd59eb657743aa86fbc1895cb15872a317caa
• http://www.debian.org/security/2017/dsa-3986Third Party Advisory
• http://www.securitytracker.com/id/1039233Third Party Advisory, VDB Entry
• https://bugs.ghostscript.com/show_bug.cgi?id=698158Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201811-12Third Party Advisory
• http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=671fd59eb657743aa86fbc1895cb15872a317caa
• http://www.debian.org/security/2017/dsa-3986Third Party Advisory
• http://www.securitytracker.com/id/1039233Third Party Advisory, VDB Entry
• https://bugs.ghostscript.com/show_bug.cgi?id=698158Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201811-12Third Party Advisory

Published

Jul 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1170IBM WebSphere Commerce Enterprise, Professional, Express, an…
• CVE-2017-11703A memory leak vulnerability was found in the function parseS…
• CVE-2017-11704A heap-based buffer over-read was found in the function deco…
• CVE-2017-11705A memory leak was found in the function parseSWF_SHAPEWITHST…
• CVE-2017-11706The Boozt Fashion application before 2.3.4 for Android allow…
• CVE-2017-1171The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 conta…
• CVE-2017-11715job/uploadfile_save.php in MetInfo through 5.3.17 blocks the…
• CVE-2017-11716MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode.
• CVE-2017-11717MetInfo through 5.3.17 accepts the same CAPTCHA response for…
• CVE-2017-11718There is URL Redirector Abuse in MetInfo through 5.3.17 via …
• CVE-2017-11719The dnxhd_decode_header function in libavcodec/dnxhddec.c in…
• CVE-2017-11720There is a division-by-zero vulnerability in LAME 3.99.5, ca…