Arbitrary File Existence and Size Disclosure in Artifex Ghostscript

CVE-2018-11645 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977.

Learn more about our Web Application Penetration Testing UK.