Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-10216
HistoryNov 27, 2019 - 1:15 p.m.

Authentication flaw

2019-11-2713:15:00
PRIOn knowledge base
www.prio-n.com
8

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

In ghostscript before version 9.50, the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas.