CVE-2016-7978 PUBLISHED

Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.

EPSS 2.96% · 86.4th percentile

Risk Scores

EPSS Score
2.96%
86.4th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSghostscript0, 9.10~dfsg-0ubuntu2, 9.10~dfsg-0ubuntu3
Ubuntu:16.04:LTSghostscript0, 9.16~dfsg~0-0ubuntu3, 9.16~dfsg~0-0ubuntu4

Timeline

References

Open in Interactive Console →