Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pstopnm in netpbm does not properly use the "-dSAFER" option when calling Ghostscript to convert a PostScript file into a (1) PBM, (2) PGM, or (3) PNM file, which allows external user-assisted attackers to execute arbitrary commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NetPBM PSToPNM 任意代码执行漏洞
Vulnerability Description
当调用Ghostscript将PostScript文件转换成(1) PBM,(2) PGM或(3)PNM文件时,netpbm中的pstopnm不能正确地使用"-dSAFER"选项。这使得外部用户辅助攻击者可以执行任意的命令。
CVSS Information
N/A
Vulnerability Type
N/A