Lucene search

K
cvelistRedhatCVELIST:CVE-2019-3839
HistoryMay 16, 2019 - 6:31 p.m.

CVE-2019-3839

2019-05-1618:31:08
CWE-648
redhat
raw.githubusercontent.com
1

7.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.1%

It was found that in ghostscript some privileged operators remained accessible from various places after the CVE-2019-6116 fix. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER. Ghostscript versions before 9.27 are vulnerable.