This host is installed with Ghostscript and is prone to arbitrary command execution vulnerability.

Successful exploitation allows the attackers to execute arbitrary postscript commands via the 'gs_init.ps' file, if a user is tricked into opening a file using the '-P-' option in an attacker controlled directory. Impact Level: Application

Upgrade Ghostscript to version 9.0 or later, For updates refer to http://www.ghostscript.com

The flaw is due to, application reading certain postscript files in the current working directory although the '-P-' command line option is set.

Ghostscript version 8.71 and prior

• http://secunia.com/advisories/40452
• http://www.vupen.com/english/advisories/2010/1757

---

Updated on 2015-03-25