The host is installed with Artifex Ghostscript prior to 10.01.2 and is prone to an arbitrary command execution vulnerability. A flaw is present in the application, which fails to properly validate permission for pipe devices (with the %pipe% prefix or the | pipe character prefix). Successful exploitation allows attackers to make the rogue documents not only to create pages of text and graphics, but also to send system commands into the Ghostscript rendering engine and trick the software into running them.