security flaw

pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a 1 PBM, 2 PGM, or 3 PNM file, which allows external user-assisted attackers to execute arbitrary commands...

SAFER+attack.txt

Date: Wed, 30 Dec 1998 01:41:59 -0700 MST From: mea culpa To: InfoSec News Subject: ISN Academic Attacks on SAFER+ Forwarded From: "Jay D. Dyson" Originally From: John Kelsey I believe I have found two attacks on the SAFER+ version with 256-bit keys. While these attacks aren't practical, they...

PT-1995-1007 · Artifex · Ghostscript

Name of the Vulnerable Software and Affected Versions: ghostscript affected versions not specified Description: The issue allows remote attackers to execute commands through the ghostscript command when the -dSAFER option is used. Recommendations: At the moment, there is no information about a...