← Database

CVE-2005-2536

HIGH CVSS: 7.5 Published: 2005-08-10 Modified: 2026-06-16

Description

pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file.

Affected Platforms

Pstotext Pstotext

Weakness Type

NVD-CWE-Other

References