CVE-2024-29511

Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 10.03.1

Description The Ghostscript software suite contains a directory traversal issue when using Tesseract for Optical Character Recognition (OCR). This allows for arbitrary file reading and writing of error messages to arbitrary files through the OCRLanguage parameter. Specifically, exploitation can occur via the debug file and user patterns file parameters. The API endpoints potentially involved are those utilizing OCR functionality. The vulnerable parameters are debug file and user patterns file.

Recommendations Versions prior to 10.03.1 should be updated to version 10.03.1 or later.