Lucene search

K
osvGoogleOSV:CVE-2019-10216
HistoryNov 27, 2019 - 1:15 p.m.

CVE-2019-10216

2019-11-2713:15:10
Google
osv.dev
6

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.9%

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.