CVE-2016-7979 Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
CriticalCVSS 9.8
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ghostscript(Debian:12) | < 9.19~dfsg-3.1 | 9.19~dfsg-3.1 |
| debian/ghostscript(Debian:13) | < 9.19~dfsg-3.1 | 9.19~dfsg-3.1 |
| debian/ghostscript(Debian:14) | < 9.19~dfsg-3.1 | 9.19~dfsg-3.1 |
| artifex ghostscript | <= 9.20 | No fix listed |
References
- Debian Security Tracker CVE-2016-7979 vendor-advisory
- git.ghostscript.com
- RHSA-2017:0013 vendor-advisory
- RHSA-2017:0014 vendor-advisory
- DSA-3691 vendor-advisory
- [oss-security] 20161005 Re: CVE Request - multiple ghostscript -dSAFER sandbox problems mailing-list patch
- 95337 third-party-advisory vdb-entry
- bugs.ghostscript.com issue-tracking patch
- GLSA-201702-31 vendor-advisory
- bugs.debian.org issue-tracking