Live › vulnerability › CVE-2017-8291
Go to dashboardGhostscript has a type confusion bug in its handling of .rsdparams files that lets a crafted PostScript file bypass the -dSAFER sandbox. An attacker who can get Ghostscript to process a malicious file can run arbitrary commands on the host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Artifex Ghostscript | vendor | – | – |
Upgrade Ghostscript to the version the vendor lists as fixed for CVE-2017-8291.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.
This page as .md · .json · in your agent: get_signal("CVE-2017-8291")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.