Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ghostscript before 5.10-16 uses an empty LD_RUN_PATH environmental variable to find libraries in the current directory, which could allow local users to execute commands as other users by placing a Trojan horse library into a directory from which another user executes ghostscript.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Aladdin Ghostscript任意分享库使用漏洞
Vulnerability Description
ghostscript 5.10-16之前的版本使用空的LD_RUN_PATH环境变量查找当前目录中的库，本地用户通过在目录中放置Trojan木马库从而执行任意命令。该目录来自于另一个执行ghostscript的用户。
CVSS Information
N/A
Vulnerability Type
N/A