CVE-2016-7976
High · 8.8CVSS
8.8
EPSS
23.5%
Published
Aug 7, 2017
CISA due date
—
The record
The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | ghostscript | 0 | 9.19~dfsg-3.1 |
| Debian:11 | ghostscript | 0 | 9.19~dfsg-3.1 |
| Debian:12 | ghostscript | 0 | 9.19~dfsg-3.1 |
| Debian:13 | ghostscript | 0 | 9.19~dfsg-3.1 |
| Debian:7 | ghostscript | 0 | 9.05~dfsg-6.3+deb7u3 |
| Debian:8 | ghostscript | 0 | 9.06~dfsg-2+deb8u3 |
| Mageia:5 | ghostscript | 0 | 9.20-1.mga5 |
| Mageia:5 | gutenprint | 0 | 5.2.10-5.1.mga5 |
| Mageia:5 | libspectre | 0 | 0.2.7-5.1.mga5 |
| Ubuntu:14.04:LTS | ghostscript | 0 | 9.10~dfsg-0ubuntu10.5 |
| Ubuntu:16.04:LTS | ghostscript | 0 | 9.18~dfsg~0-0ubuntu2.2 |
| openSUSE:Tumbleweed | ghostscript | 0 | 9.20-2.1 |
Related vulnerabilities
- CVE-2023-38559 A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in… Also affects ghostscript
- CVE-2021-45944 Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample… Also affects ghostscript
- CVE-2013-5653 The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER"… Also affects ghostscript
- CVE-2009-3560 The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the… Also affects ghostscript
- CVE-2009-3720 The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in… Also affects ghostscript
- CVE-2008-0411 Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61… Also affects ghostscript
- CVE-2024-46956 An issue was discovered in psi/zfile.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript
- CVE-2024-46955 An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. Also affects ghostscript