USN-3148-1
Advisory lineage Upstream: 12 Downstream: 0
Published: 02 Dec 2016, 02:05
Last modified:22 Apr 2026, 09:29
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
02 Dec 2016, 02:05
Published
Vulnerability first disclosed
22 Apr 2026, 09:29
Last Modified
Vulnerability information updated
Description
ghostscript vulnerabilities Tavis Ormandy discovered multiple vulnerabilities in the way that Ghostscript processes certain Postscript files. If a user or automated system were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly execute arbitrary code. (CVE-2016-7976, CVE-2016-7978, CVE-2016-7979, CVE-2016-8602) Multiple vulnerabilities were discovered in Ghostscript related to information disclosure. If a user or automated system were tricked into opening a specially crafted file, an attacker could expose sensitive data. (CVE-2013-5653, CVE-2016-7977)
Affected Systems
- ubuntu•ghostscript
< 9.10~dfsg-0ubuntu10.5 | < 9.18~dfsg~0-0ubuntu2.2