CVE-2019-3838
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in …
Published: 2019-03-25 · CVSS: 7.3 · CVSS 3.0
It was found that the forceput operator could be extracted from the DefineResource method in ghostscript before 9.27. A specially crafted PostScript file could use this flaw in order to, for example, have access to the file system outside of the constrains imposed by -dSAFER.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7