CVE-2016-7976

The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams.

• CWE-20

• http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git%3Ba=commit%3Bh=6d444c273da5499a4cd72f21cb6d4c9a5256807d
• http://www.debian.org/security/2016/dsa-3691
• http://www.openwall.com/lists/oss-security/2016/10/19/6Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/95332Third Party Advisory, VDB Entry
• https://bugs.ghostscript.com/show_bug.cgi?id=697178Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/201702-31Third Party Advisory
• http://git.ghostscript.com/?p=user/chrisl/ghostpdl.git%3Ba=commit%3Bh=6d444c273da5499a4cd72f21cb6d4c9a5256807d
• http://www.debian.org/security/2016/dsa-3691
• http://www.openwall.com/lists/oss-security/2016/10/19/6Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/95332Third Party Advisory, VDB Entry
• https://bugs.ghostscript.com/show_bug.cgi?id=697178Issue Tracking, Third Party Advisory
• https://security.gentoo.org/glsa/201702-31Third Party Advisory

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7970Buffer overflow in the calc_coeff function in libass/ass_blu…
• CVE-2016-7971Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7972The check_allocations function in libass/ass_shaper.c in lib…
• CVE-2016-7973The AppleTalk parser in tcpdump before 4.9.0 has a buffer ov…
• CVE-2016-7974The IP parser in tcpdump before 4.9.0 has a buffer overflow …
• CVE-2016-7975The TCP parser in tcpdump before 4.9.0 has a buffer overflow…
• CVE-2016-7977Ghostscript before 9.21 might allow remote attackers to bypa…
• CVE-2016-7978Use-after-free vulnerability in Ghostscript 9.20 might allow…
• CVE-2016-7979Ghostscript before 9.21 might allow remote attackers to bypa…
• CVE-2016-7980Cross-site request forgery (CSRF) vulnerability in ecrire/ex…
• CVE-2016-7981Cross-site scripting (XSS) vulnerability in valider_xml.php …
• CVE-2016-7982Directory traversal vulnerability in ecrire/exec/valider_xml…