Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Artifex Software ghostscript — DSA-4518 Clear all filters
TI-2019-11018 CVE-2019-14813 · GHSA-r3w6-mj6m-w4m6

Incorrect authorization in Artifex ghostscript

Priority MEDIUM 55

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10963 Published 2019-09-06 Partial fix CWE-648
TI-2019-11022 CVE-2019-14817 · GHSA-f4cx-p6hx-chwv

Incorrect authorization in Artifex ghostscript

Priority LOW 38

A flaw was found in, ghostscript versions prior to 9.50, in the .pdfexectoken and other procedures where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02025 Published 2019-09-03 Partial fix CWE-648
TI-2019-11016 CVE-2019-14811 · GHSA-q58c-x76h-3jhc

Incorrect authorization in Artifex ghostscript

Priority MEDIUM 40

A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.03746 Published 2019-09-03 Partial fix CWE-648