Lucene search

K
osvGoogleOSV:CVE-2019-10216
HistoryNov 27, 2019 - 1:15 p.m.

CVE-2019-10216

2019-11-2713:15:10
Google
osv.dev
10

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

42.9%

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.