PT-2016-7452 · Artifex+2 · Ghostscript+2

Florian Weimer + 1 · Published 2016-10-06 · Updated 2024-06-15 · CVE-2016-7976

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ghostscript versions 9.18 through 9.20

Description The issue allows remote attackers to execute arbitrary code via crafted userparams.

Recommendations For Ghostscript versions 9.18 through 9.20, update to a version that contains a fix for this issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2018-2344

CVE-2016-7976

DLA-674-1

DSA-3691-1

DSA-3691-2

MGASA-2017-0133

OPENSUSE-SU-2024:10003-1

USN-3148-1

Affected Products

Alt Linux

Ghostscript

Ubuntu

References · 39

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/fileformat/imagemagick_delegate.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/fileformat/ghostscript_type_confusion.rb · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-7976 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-8602 · Vendor Advisory
• http://debian.org/security/2016/dsa-3691 · Vendor Advisory
• https://security.gentoo.org/glsa/201702-31 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3691-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3148-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3148-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10003-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3691-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7977 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7976 · Vendor Advisory
• https://ubuntu.com/security/CVE-2013-5653 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-7976 · Vendor Advisory