CVE-2016-7976

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git%3Ba=commit%3Bh=6d444c273da5499a4cd72f21cb6d4c9a5256807d
http://www.debian.org/security/2016/dsa-3691
http://www.openwall.com/lists/oss-security/2016/10/19/6Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/95332Third Party Advisory, VDB Entry
https://bugs.ghostscript.com/show_bug.cgi?id=697178Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/201702-31Third Party Advisory
http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git%3Ba=commit%3Bh=6d444c273da5499a4cd72f21cb6d4c9a5256807d
http://www.debian.org/security/2016/dsa-3691
http://www.openwall.com/lists/oss-security/2016/10/19/6Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/95332Third Party Advisory, VDB Entry
https://bugs.ghostscript.com/show_bug.cgi?id=697178Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/201702-31Third Party Advisory

Timeline

Published: Aug 7, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-79775.5Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via CVE-2016-79789.8Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference l CVE-2016-79799.8Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code b CVE-2016-79808.8Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack t CVE-2016-79816.1Cross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script CVE-2016-79827.5Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on CVE-2016-79839.8The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print().CVE-2016-79849.8The TFTP parser in tcpdump before 4.9.0 has a buffer overflow in print-tftp.c:tftp_print().CVE-2016-79859.8The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().CVE-2016-79869.8The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions.CVE-2016-79877.5An issue was discovered in Siemens ETA4 firmware (all versions prior to Revision 08) of the SM-2558 extension module for: SICAM AK, SICAM TM CVE-2016-79887.5On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handling the com.[Samsung].android.