CVE-2016-8602

The .sethalftone5 function in psi/zht2.c in Ghostscript before 9.21 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted Postscript document that calls .sethalftone5 with an empty operand stack.

Date published : 2017-04-14

http://www.securityfocus.com/bid/95311

http://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=f5c7555c303