Skip to content
OpenAdvisories

Product · Artifex

GhostPDL

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.8

    Ghostscript before 10.08.0 -dSAFER Bypass via .putgstringcopy .forceput Recovery

    Ghostscript before 10.08.0 contains a -dSAFER bypass vulnerability in the .putgstringcopy procedure in gs_fonts.ps, which calls the privileged .forceput operator without checking operand types. Attackers can supply crafted PostScript or PDF documents that tri…