27 matches found
CVE-2005-2536
pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file...
CVE-2005-2536
CVE-2005-2536 affects pstotext prior to fixes described in Debian DSA-792-1 and GLSA 200507-29. The vulnerability arises because pstotext did not pass Ghostscript the -dSAFER option when extracting text from PostScript/PDF files, enabling a remote attacker to execute arbitrary commands via a mali...
CVE-2005-2536
Removed by vendor...
GLSA-200507-29 : pstotext: Remote execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200507-29 pstotext: Remote execution of arbitrary code Max Vozeler reported that pstotext calls the GhostScript interpreter on untrusted PostScript files without specifying the -dSAFER option. Impact : An attacker could craft a...
pstotext: Remote execution of arbitrary code
Background pstotext is a program that works with GhostScript to extract plain text from PostScript and PDF files. Description Max Vozeler reported that pstotext calls the GhostScript interpreter on untrusted PostScript files without specifying the -dSAFER option. Impact An attacker could craft a...
[SA16183] pstotext Arbitrary Postscript Code Execution Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...