PT-2016-7455 · Artifex+5 · Ghostscript+5

Tavis Ormandy · Published 2016-10-06 · Updated 2024-06-15 · CVE-2016-7979

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 9.21

Description The issue allows remote attackers to bypass the SAFER mode protection mechanism, which could lead to the execution of arbitrary code. This is achieved by leveraging type confusion in the initialize dsc parser function.

Recommendations For Ghostscript versions prior to 9.21, update to version 9.21 or later to resolve the issue.

Fix

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

ALT-PU-2018-2344

CESA-2017_0013

CESA-2017_0014

CVE-2016-7979

DLA-674-1

DSA-3691-1

DSA-3691-2

MGASA-2017-0133

OPENSUSE-SU-2016_2574-1

OPENSUSE-SU-2016_2648-1

OPENSUSE-SU-2024:10003-1

RHSA-2017:0013

RHSA-2017:0014

RHSA-2017_0013

RHSA-2017_0014

SUSE-SU-2016:2492-1

SUSE-SU-2016:2493-1

USN-3148-1

Affected Products

Alt Linux

Centos

Ghostscript

Red Hat

Suse

Ubuntu

References · 44

• https://osv.dev/vulnerability/DEBIAN-CVE-2016-7979 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0133.html · Security Note
• https://osv.dev/vulnerability/DSA-3691-2 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0014.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7977 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3148-1 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0013.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7979 · Security Note
• https://bugs.ghostscript.com/show_bug.cgi?id=697190 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7979 · Vendor Advisory
• http://openwall.com/lists/oss-security/2016/10/05/15 · Patch
• https://osv.dev/vulnerability/MGASA-2017-0133 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-3691-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7979 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-7979 · Security Note