PT-2024-6394
CVE-2023-52722
·
تاريخ النشر
2024-04-27
·
تاريخ التحديث
2026-09-02
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Artifex Ghostscript versions prior to 10.03.1
Description
The issue is related to the incorrect input validation in the psi/zmisc1.c file of the Artifex Ghostscript software. This can allow a remote attacker to execute arbitrary code. The problem occurs when SAFER mode is used, allowing eexec seeds other than the Type 1 standard.
Recommendations
- Update Artifex Ghostscript to version 10.03.1 immediately to address the issue.
- Audit systems to ensure no unauthorized access or file modifications have occurred.
- If Artifex Ghostscript is used in web services, ensure that these services are also updated.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾