CVE Catalog
CVE-2016-7979
CriticalSummary
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.
Risk Assessment
Organizations may be exposed to remote attacks that could lead to unauthorized access and execution of malicious code on systems using the vulnerable version of Ghostscript.
Recommendation
It is recommended to upgrade Ghostscript to version 9.21 or later to mitigate this vulnerability.
Original NVD description (English source)
Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code by leveraging type confusion in .initialize_dsc_parser.