suse · CVE-2016-7976

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-7976 severity important: SUSE including 40 source package names (ghostscript-10.05.0-160000.2.2, ghostscript-9.20-2.1, …), 50 product×package rows across 21 product lines (SUSE Linux Enterprise Desktop 12 SP4, SUSE Linux Enterprise High Performance Computing 12 SP5, … (21 product lines)): Fixed 50.

Description:

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.