Ghostscript up to 9.27 .pdfexectoken PostScript File privilege escalation
iSpeech
A vulnerability classified as critical was found in Ghostscript up to 9.27 (Document Processing Software). This vulnerability affects the function .pdfexectoken. Upgrading to version 9.28 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.ghostscript.com. The best possible mitigation is suggested to be patching the affected component.
https://vuldb.com/?id.141202
Gloss