Search vulnerabilities

Results 2

Export CSV
CVE-2006-5869

pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file name.

CVSS 2.0 · 5.1 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2005-2536

pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file.

CVSS 2.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Products