| Package | Affected versions | Patched versions |
|---|---|---|
| afpl ghostscript | = 9.10 |
The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free