Threats tagged 'ghsa-hg3g-c775-3fpj'

Ghostscript versions prior to 10.08.0 have a vulnerability that allows bypassing the -dSAFER security feature. This occurs due to the .putgstringcopy procedure in gs_fonts.ps calling the privileged .forceput operator without proper operand type checks. Crafted PostScript or PDF files can exploit this flaw by triggering a type error and recovering .forceput through a custom error handler, leading to use-after-free conditions and arbitrary code execution.