high8.8
CVE-2016-7976
The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.
Impact
The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artifex | Ghostscript | Versions 9.18, 9.20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git%3Ba=commit%3Bh=6d444c273da5499a4cd72f21cb6d4c9a5256807d
- http://www.debian.org/security/2016/dsa-3691
- http://www.openwall.com/lists/oss-security/2016/10/19/6
- http://www.securityfocus.com/bid/95332
- https://bugs.ghostscript.com/show_bug.cgi?id=697178
- https://security.gentoo.org/glsa/201702-31
- http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git%3Ba=commit%3Bh=6d444c273da5499a4cd72f21cb6d4c9a5256807d
- http://www.debian.org/security/2016/dsa-3691
- http://www.openwall.com/lists/oss-security/2016/10/19/6
- http://www.securityfocus.com/bid/95332
- https://bugs.ghostscript.com/show_bug.cgi?id=697178
- https://security.gentoo.org/glsa/201702-31