CVE-2019-14813

Name of the Vulnerable Software and Affected Versions ghostscript versions 9.x before 9.50

Description A flaw in the setsystemparams procedure of ghostscript enables scripts to bypass -dSAFER restrictions. This allows a specially crafted PostScript file to disable security protection, potentially granting access to the file system or enabling the execution of arbitrary commands.

Recommendations For ghostscript versions 9.x before 9.50, update to version 9.50 or later to resolve the issue. As a temporary workaround, consider restricting access to the setsystemparams procedure until a patch is available. Avoid using the setsystemparams procedure in sensitive environments until the issue is resolved.