Filtered by vendor Pstotext Subscriptions
Filtered by product Pstotext Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2005-2536 1 Pstotext 1 Pstotext 2024-08-07 N/A
pstotext before 1.8g does not properly use the "-dSAFER" option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file.
CVE-2006-5869 1 Pstotext 1 Pstotext 2024-08-07 N/A
pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file name.