JVN#52486659: Ghostscript access restriction bypass vulnerability

Ghostscript provided by Artifex Software Inc. contains an access restriction bypass vulnerability (CWE-284).

Impact

By Ghostscript processing a specially crafted file, arbitrary command may be executed with the privilege of Ghostscript.

Solution

Update the Software
Update the software according to the information provided by the developer.
According to developer, this vulnerability was addressed in Ghostscript 9.50.

Products Affected

• Ghostscript 9.27 and earlier
  As for the details of the affected Ghostscript packages, refer to the information under the section [Vendor Status].