CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2017-04-27
Artifex Ghostscript Type Confusion -dSAFER Bypass and Remote Code Execution Vulnerability (CVE-2017-8291)
[Affected Scope] Artifex Ghostscript versions released through 2017-04-26, and image processing libraries (e.g., ImageMagick) relying on it
[Impact] Remote attackers can bypass the '-dSAFER' sandbox restriction and execute arbitrary system commands via a crafted EPS document
[Mitigation] Immediately upgrade Ghostscript to the patched version or disable PostScript/EPS processing in application policies