CVE-2002-0363
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or ...
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.
Exploit likelihood
What each source reports
NVD Score used
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.
- Record
CVE-2002-0363- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.
- Record
CVE-2002-0363- Updated
- 2026-11-02
EUVDEUVD-2002-0360 No score
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.
- Record
EUVD-2002-0360- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fmwv-2jjw-c8mw No score
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or ...
ghostscript before 6.53 allows attackers to execute arbitrary commands by using .locksafe or .setsafe to reset the current pagedevice.
- Record
GHSA-fmwv-2jjw-c8mw- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0363 is a high vulnerability (CVSS 7.5) in Aladdin Enterprises Ghostscript, published May 29, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 81st percentile. No source names a fixed version.
References
redhat.com/support/errata/RHSA-2003-209.html
securityfocus.com/bid/4937
iss.net/security_center/static/9254.php
ghostscript.com/pipermail/gs-code-review/2002-February/001900.html
nvd.nist.gov/vuln/detail/CVE-2002-0363
github.com/advisories/GHSA-fmwv-2jjw-c8mw