3 ms·
Ghostscript seems to be often used as a backend tool in automated pipelines. So, the whole RCE thing is probably pretty true in this case.
by justinclift 3y ago
Ghostscript seems to be often used as a backend tool in automated pipelines.
So, the whole RCE thing is probably pretty true in this case.
- worthless-trash 3y agoIf we classify flaws this way though, everything is access able to be accessed via ssh, etc. CVE flaws have an an 'environment' section for exactly this purpose.
- justinclift 3y agoYeah, that's a fair point. They might be stressing the "remote" bit though, just so it sinks in for people using it as part of a document conversion pipeline or something. But, that's just me guessing wildly. :)