Another 4 vulnerabilities in Ghostscript
Two weeks after the discovery of the previous critical issue in Ghostscript, 4 more similar vulnerabilities have been identified (CVE-2019-14811, CVE-2019-14812, CVE-2019-14813, CVE-2019-14817) that allow bypassing the ‘-dSAFER’ isolation mode by creating a link to ‘.forceput’. When processing specially crafted documents, an attacker can access the file system contents and achieve arbitrary code execution on the system (for example, by adding commands to […]
