Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-14811

A flaw was found in, ghostscript versions prior to 9.50, in the .pdf_hook_DSC_Creator procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 73.7%
CVSS Severity
CVSS v3 Score 7.3
CVSS v2 Score 6.8
References
Products affected by CVE-2019-14811


Contact Us

Shodan ® - All rights reserved