Astra Linux – Vulnerability in GhostScript

A issue was discovered in Artifex Ghostscript prior to version 10.03.1. Path traversal and command execution can occur through a crafted PostScript document due to path reduction in the base/gpmisc.c file. For example, restrictions on the use of %pipe% can be bypassed using the output filename...