CVE-2016-7979: Incorrect Type Cast
Published May 23, 2017
·Updated
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initializedscparser.
Affected Software
1 affected component
Artifex ghostscript<=9.20
Remediation
Patch Available
Patch Available
Event History
May 23, 2017
CVE Published
via MITRE·03:56 AM
Data Sourced
via MITRE·03:56 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-7979?
CVE-2016-7979 is rated as a critical vulnerability due to the potential for remote code execution.
2
How can I fix CVE-2016-7979?
To fix CVE-2016-7979, upgrade to Ghostscript version 9.21 or later.
3
What software is affected by CVE-2016-7979?
CVE-2016-7979 affects all versions of Ghostscript up to and including 9.20.
4
What types of attacks are possible with CVE-2016-7979?
CVE-2016-7979 allows remote attackers to execute arbitrary code by bypassing the SAFER mode protection.
5
What is the nature of the vulnerability in CVE-2016-7979?
CVE-2016-7979 involves type confusion in the .initialize_dsc_parser component of Ghostscript.