Ghostscript Sandbox Bypass Vulnerabilities

by CIRT Team

Description: Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities, which may allow a remote, unauthenticated attacker to execute arbitrary commands on a vulnerable system.

Impact: A remote attacker could exploit this vulnerability to take control of an affected system.

Mitigation: Updates are available. Please see the references or vendor advisory for more information.

Reference URL’s:

• https://www.kb.cert.org/vuls/id/332928

CIRT Team