ALT-PU-2020-3110-1
Closed vulnerabilities
Published: 2005-08-10
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2005-2536
pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file.
Severity: HIGH (7.5)
References:
Published: 2006-11-27
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2006-5869
pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file name.
Severity: MEDIUM (5.1)
References: