Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21180
HistoryAug 13, 2019 - 12:29 a.m.

Privilege Escalation

2019-08-1300:29:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.001 Low

EPSS

Percentile

43.0%

ghostscript is vulnerable to privilege escalation. The vulnerability exists due to improperly secured privileged calls of .buildfont1. An attacker could access the files outside the restricted areas by creating a specially crafted PostScript file that could escalate privileges.