Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Chris Liddell

Researcher fromArtifex
#22935of 53,632
10Total CVSS
Vulnerabilities · 1
PT-2024-6394
10
2024-04-27
Artifex · Artifex Ghostscript · CVE-2023-52722
**Name of the Vulnerable Software and Affected Versions** Artifex Ghostscript versions prior to 10.03.1 **Description** The issue is related to the incorrect input validation in the psi/zmisc1.c file of the Artifex Ghostscript software. This can allow a remote attacker to execute arbitrary code. The problem occurs when SAFER mode is used, allowing eexec seeds other than the Type 1 standard. **Recommendations** - Update Artifex Ghostscript to version 10.03.1 immediately to address the issue. - Audit systems to ensure no unauthorized access or file modifications have occurred. - If Artifex Ghostscript is used in web services, ensure that these services are also updated.