CVEs-PoC/2014/CVE-2014-0466.md

CVE-2014-0466

Description

The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrary files or execute arbitrary commands via a crafted PostScript file.

POC

Reference

No PoCs from references.

Github

• https://github.com/andir/nixos-issue-db-example