PT-2024-5031 · Artifex+4 · Ghostscript+4
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Artifex Ghostscript versions prior to 10.03.0
Description:
The issue is related to a stack-based buffer overflow in the
pdfi apply filter() function of the Ghostscript software suite, which occurs during the filtering process. This can be exploited by a remote attacker to execute arbitrary code, cause a denial of service, or gain full control over the application. The vulnerability is triggered by a long PDF filter name.Recommendations:
For versions prior to 10.03.0, update to version 10.03.0 or later to resolve the issue.
As a temporary workaround, consider restricting the use of long PDF filter names to minimize the risk of exploitation.
Exploit
Fix
Memory Corruption
Stack Overflow
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Ghostscript
Linuxmint
Ubuntu