{"id":9225,"date":"2019-09-06T09:11:09","date_gmt":"2019-09-06T09:11:09","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=9225"},"modified":"2026-04-17T18:07:51","modified_gmt":"2026-04-17T18:07:51","slug":"ghostscript-buildfont1-dsafer-sandbox-bypass-vulnerability","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/ghostscript-buildfont1-dsafer-sandbox-bypass-vulnerability\/","title":{"rendered":"Ghostscript .buildfont1 \u2013dSAFER Sandbox Bypass Vulnerability"},"content":{"rendered":"


\n<\/p>\n

    \n
  1. \n

    Vulnerability Overview<\/strong><\/h2>\n<\/li>\n<\/ol>\n

    Ghostscript is a suite of software based on an interpreter for Adobe System’s PostScript and Portable Document Format (PDF) page description languages. It is widely used as a raster image processor (RIP) for raster computer printers. Currently, it has been ported from Linux to other operating systems, including UNIX, Mac OS X, VMS, Windows, OS\/2, and Mac OS classic.<\/p>\n

    On August 2, 2019, Artifex officially submitted a fix for the merged Bug 701394 (protect use of .forceput with executeonly) on the master branch of Ghostscript, designed to fix the -dSAFER sandbox bypass vulnerability (CVE-2019-10216). -dSAFER is a security sandbox used by Ghostscript for prevention of insecure PostScript operations. The CVE-2019-10216 vulnerability is caused by the .buildfont1 procedure that does not properly secure its privileged calls, allowing attackers to bypass -dSAFER restrictions via a crafted PostScript file, thus escalating privileges and accessing files outside of restricted areas.<\/p>\n

    Applications like ImageMagick that use Ghostscript to process PostScript contents by default are affected by this vulnerability.<\/p>\n

    References:<\/p>\n