The Ghostscript Project vulnerabilities
3 vulnerabilities
Known vulnerabilities in The Ghostscript Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Ghostscript3 vulnerabilities
PrioritiseCVE-2019-3839the ghostscript project · ghostscript +15 morethe ghostscript project ghostscriptIt was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.27 are vulnerable.CVSS7.8HighEPSS1.71%PrioritiseCVE-2019-3835the ghostscript project · ghostscript +14 morethe ghostscript project ghostscriptIt was found that the superexec operator was available in the internal dictionary in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.CVSS7.3HighEPSS2.47%PrioritiseCVE-2019-3838the ghostscript project · ghostscript +36 morethe ghostscript project ghostscriptIt was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.CVSS7.3HighEPSS2.47%