https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:44:26 +0000 https://vulnerability.circl.lu/vuln/cve-2019-14811 <p><strong>Affected:</strong> Artifex Software ghostscript</p> <p>A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.</p> <p><strong>Affected:</strong> Artifex Software ghostscript</p> <p>A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.</p> https://vulnerability.circl.lu/vuln/cve-2019-14811 https://vulnerability.circl.lu/vuln/usn-4111-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ghostscript, Ubuntu:18.04:LTS: ghostscript</p> <p>Hiroki Matsukuma discovered that the PDF interpreter in Ghostscript did not properly restrict privileged calls when ‘-dSAFER’ restrictions were in effect. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files. (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ghostscript, Ubuntu:18.04:LTS: ghostscript</p> <p>Hiroki Matsukuma discovered that the PDF interpreter in Ghostscript did not properly restrict privileged calls when ‘-dSAFER’ restrictions were in effect. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files. (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817)</p> https://vulnerability.circl.lu/vuln/usn-4111-1