Ghostscript is reportedly affected by multiple local vulnerabilities because it creates temporary files in an insecure way. These issues likely stem from a design error that causes the application to fail to verify the presence of a file before writing to it. An attacker may leverage these issues to overwrite arbitrary files with the privileges of an unsuspecting user that activates a vulnerable application. AFPL Ghostscript 8.50 and GNU Ghostscript 8.01 are affected by these vulnerabilities; other versions may also be affected.
Ghostscript is reportedly affected by multiple local vulnerabilities because it creates temporary files in an insecure way. These issues likely stem from a design error that causes the application to fail to verify the presence of a file before writing to it. An attacker may leverage these issues to overwrite arbitrary files with the privileges of an unsuspecting user that activates a vulnerable application. AFPL Ghostscript 8.50 and GNU Ghostscript 8.01 are affected by these vulnerabilities; other versions may also be affected.