Total vulnerabilities in the database
In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.
| Software | From | Fixed in |
|---|---|---|
| artifex / ghostscript | - | 9.50 |
| redhat / enterprise_linux_desktop | 7.0 | 7.0.x |
| redhat / enterprise_linux_workstation | 7.0 | 7.0.x |
| redhat / enterprise_linux | 6.0 | 6.0.x |
| redhat / enterprise_linux_server | 7.0 | 7.0.x |
| redhat / enterprise_linux | 5.0 | 5.0.x |
| redhat / enterprise_linux | 8.0 | 8.0.x |
| redhat / enterprise_linux_server_eus | 7.7 | 7.7.x |
| redhat / enterprise_linux_server_aus | 7.7 | 7.7.x |
| redhat / enterprise_linux_server_tus | 7.7 | 7.7.x |
| redhat / 3scale_api_management | 2.6 | 2.6.x |