Lucene search

K
redhatcveRedhat.comRH:CVE-2019-6116
HistoryJan 23, 2019 - 8:20 p.m.

CVE-2019-6116

2019-01-2320:20:04
redhat.com
access.redhat.com
13

0.973 High

EPSS

Percentile

99.9%

It was found that ghostscript could leak sensitive operators on the operand stack when a pseudo-operator pushes a subroutine. A specially crafted PostScript file could use this flaw to escape the -dSAFER protection in order to, for example, have access to the file system outside of the SAFER constraints.

Mitigation

Please refer to the "Mitigation" section of CVE-2018-16509 : <https://access.redhat.com/security/cve/cve-2018-16509&gt;