A flaw was found in ghostscript versions prior to 9.50 in the .pdfexectoken and other procedures where it did not properly secure its privileged calls enabling scripts to bypass `-dSAFER` restrictions. A specially crafted PostScript file could disable security protection and then have access to the file system or execute arbitrary commands.