| Package | Affected versions | Patched versions |
|---|---|---|
| pstotext | ≤ 1.9.1 |
pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free