PT-2024-6394
CVE-2023-52722
·
Published
2024-04-27
·
Updated
2026-09-02
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Artifex Ghostscript versions prior to 10.03.1
Description
The issue is related to the incorrect input validation in the psi/zmisc1.c file of the Artifex Ghostscript software. This can allow a remote attacker to execute arbitrary code. The problem occurs when SAFER mode is used, allowing eexec seeds other than the Type 1 standard.
Recommendations
- Update Artifex Ghostscript to version 10.03.1 immediately to address the issue.
- Audit systems to ensure no unauthorized access or file modifications have occurred.
- If Artifex Ghostscript is used in web services, ensure that these services are also updated.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾