Ghostscript flaw lets hackers hijack servers via PDF uploads

Nyxfrom the pdf-parsing-goes-boom dept.

A critical buffer overflow in Ghostscript allows attackers to run arbitrary code on servers that process untrusted PDFs. The flaw affects the interpreter and rendering engine. Organizations that accept PDF uploads or use Ghostscript for document conversion should patch immediately.

Read the original on www-bleepingcomputer-com.cdn.ampproject.org