vendor:
PDF/PS tools
by:
Taviso
9.8
CVSS
HIGH
Remote Code Execution
20
CWE
Product Name: PDF/PS tools
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: All
2018
Critical and trivial remote code execution bugs in ImageMagick, Evince, GIMP, and other PDF/PS tools
A few critical and trivial remote code execution bugs were found in ImageMagick, Evince, GIMP, and other PDF/PS tools. These bugs include file disclosure, shell command execution, memory corruption and type confusion. One of the bugs was found to be exploited in the wild. It was suggested to disable PS, EPS, PDF and XPS coders in policy.xml by default.
Mitigation:
Disable PS, EPS, PDF and XPS coders in policy.xml by default.