Security Advisory

CVE-2005-2536

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-08-10 04:00:00
Last updated 2024-08-07 22:30:01
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file.