| Package | Affected versions | Patched versions |
|---|---|---|
| ghostscript | ≥ 9.00, < 9.50 | 9.50 |
A flaw was found in all ghostscript versions 9.x before 9.50, in the .setuserparams2 procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free