3 matches found
ghostscript: Incorrect "restoration of privilege" checking when running out of stack during exception handling
An issue was discovered in Artifex Ghostscript before 9.25. Incorrect "restoration of privilege" checking when running out of stack during exception handling could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction. This is due to an incomplete fix...
7.8CVSS5.9AI score0.02159EPSS
SaveExploits0References4
ghostscript: incomplete fix for CVE-2018-16509
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document...
9.3CVSS6AI score0.92499EPSS
SaveExploits4References4
20