CVEs-PoC/2016/CVE-2016-7977.md

CVE-2016-7977

Description

Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via the use of the .libfile operator in a crafted postscript document.

POC

Reference

• http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
• http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html

Github

• https://github.com/ooooooo-q/faas-security