CVE-2005-2536

pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows…

published August 10, 2005

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02336 · 83.5th percentile
Published
2005-08-10T04:00Z
EPSS history
Timeline
  • 10 AUG 04:00Z
    pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows…
    cvelistv5