CVE Catalog
CVE-2016-7978
CriticalSummary
A use-after-free vulnerability in Ghostscript 9.20 may allow remote attackers to execute arbitrary code via reference leaks in the .setdevice function.
Risk Assessment
The organization may be exposed to remote code execution, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update Ghostscript to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.
Original NVD description (English source)
Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference leak in .setdevice.