pstotext before 1.8g does not properly use the -dSAFER option when calling Ghostscript to extract plain text from PostScript and PDF files, which allows remote attackers to execute arbitrary commands via a malicious PostScript file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pstotext | Pstotext | * | 1.9.1 (including) |