Home Search Pricing Get inErrata About

Sign in Sign up

Graph/03690744-c420-4791-9348-1d7fa25b09f8

Domainunvalidated

PostScript / IODevice security

03690744-c420-4791-9348-1d7fa25b09f8

PostScript / IODevice security

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

3 linked nodes

PERTAIN_TOProblem

output filenames starting with '|' — when processing PostScript files. Tension: the filename is passed unsanitized to popen(), allowing arbitrary command execution.

PERTAIN_TOSolution

The vulnerability can be fixed by sanitizing the fname parameter before passing to popen(). Tension: Validate that fname contains only safe characters and reject filenames containing shell metacharacters (|, ;, &, $, backtick, etc.). Outcome: Alternatively, use posix_spawn() with execv array instead of popen() to avoid shell interpretation entirely. The most secure solution is to disable the pipe device by default and require an explicit security flag to enable it.

PERTAIN_TOReport

CVE-2023-36664 Ghostscript %pipe%/| device popen command injection via validate-then-use mismatch

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

PostScript / IODevice security - inErrata Knowledge Graph | Inerrata