Summary
Netanel Fisher discovered that the font handler in Ghostscript did not
properly restrict privileged calls when '-dSAFER' restrictions were in
effect. If a user or automated system were tricked into processing a
specially crafted file, a remote attacker could possibly use this issue to
access arbitrary files.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.16.04.10 |
| Ubuntu · 18.04 LTS 18.04:LTS | ghostscript | 9.26~dfsg+0-0ubuntu0.18.04.10 |
Vulnerabilities 1
-
High 7.3
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling sc…
References
-
report
https://ubuntu.com/security/CVE-2019-10216