VULHUB ™

Ghostscript is a freely available, open source software package for rendering postscript and portable document format files. It is available for most Unix and Linux operating systems. A problem has been discovered that may allow maliciously formatted postscript files to execute arbitrary commands. By using the .locksafe or .setsafe functions of the package to reset the page device, an attacker could execute arbitrary commands when the page is printed.

Ghostscript is a freely available, open source software package for rendering postscript and portable document format files. It is available for most Unix and Linux operating systems. A problem has been discovered that may allow maliciously formatted postscript files to execute arbitrary commands. By using the .locksafe or .setsafe functions of the package to reset the page device, an attacker could execute arbitrary commands when the page is printed.