VULHUB ™

Ghostscript is a postscript interpreter. It supports scripting commands allowing it to open and read files. When it is used in a spooling context, it is able to open and read files as user lp, potentially exposing sensitive information. Although ghostscript has a -dSAFER flag to provide additional security, this is designed to protect a user from malicious postscript files, not to protect the system from a malicious user. As such, this flag does not prevent opening and reading files.

Ghostscript is a postscript interpreter. It supports scripting commands allowing it to open and read files. When it is used in a spooling context, it is able to open and read files as user lp, potentially exposing sensitive information. Although ghostscript has a -dSAFER flag to provide additional security, this is designed to protect a user from malicious postscript files, not to protect the system from a malicious user. As such, this flag does not prevent opening and reading files.