Tag

postscript

Safeguard articles tagged "postscript" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Ghostscript (CVE-2023-36664) Explained: Command Injection via Pipe Devices

CVE-2023-36664 let a crafted PostScript or EPS file run system commands through Ghostscript's mishandling of pipe device filenames. Because Ghostscript hides behind image tools, the blast radius was wide.

Jul 8, 20266 min read