Lucene search

K
cvelistMitreCVELIST:CVE-2024-33871
HistoryJul 03, 2024 - 12:00 a.m.

CVE-2024-33871

2024-07-0300:00:00
mitre
www.cve.org
3
artifex ghostscript
code execution
postscript document
security issue

EPSS

0

Percentile

15.8%

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution via a custom Driver library, exploitable via a crafted PostScript document. This occurs because the Driver parameter for opvp (and oprp) devices can have an arbitrary name for a dynamic library; this library is then loaded.