CVE-2016-7979 in Ghostscript
Summary
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
Reservation
09/09/2016
Disclosure
05/23/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 101647 | Ghostscript SAFER Mode initialize_dsc_parser type conversion | 704 | Not defined | Official fix | CVE-2016-7979 |