CVE-2019-14813: ghostscript: Safer mode bypass by .forceput exposure in setsystemparams (701443)

Severity: Critical

CVSS Score: 9.8

A flaw was found in ghostscript, versions 9.x before 9.50, in the setsystemparams procedure where it did not properly secure its privileged calls, enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system, or execute arbitrary commands.