ghostscript: Type confusion in .initialize_dsc_parser allows remote code execution

It was found that the ghostscript function .initializedscparser did not validate its parameter before using it, allowing a type confusion flaw. A specially crafted postscript document could cause a crash code execution in the context of the gs process...

ghostscript: Type confusion in .initialize_dsc_parser allows remote code execution

It was found that the ghostscript function .initializedscparser did not validate its parameter before using it, allowing a type confusion flaw. A specially crafted postscript document could cause a crash code execution in the context of the gs process...

PT-2016-7455

Name of the Vulnerable Software and Affected Versions Ghostscript versions prior to 9.21 Description The issue allows remote attackers to bypass the SAFER mode protection mechanism, which could lead to the execution of arbitrary code. This is achieved by leveraging type confusion in the initializ...