The vulnerability in the base/gpmisc.c file of the software for processing, converting, and generating Ghostscript documents, related to incorrect input validation, allows a perpetrator to execute arbitrary code on the system.

The vulnerability of the base/gpmisc.c file in the software suite for processing, converting, and generating Ghostscript documents is related to improper validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2024-33869: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur via a crafted PostScript document because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command output filename...