CVE-2019-14811-in-pdf-exploit

CVE-2019-14811 GhostScript PDF 预览漏洞利用 PoC 该漏洞利用针对 GS 环境中的 CVE-2019-14811，在这些环境中 PostScript 输出不会回显，但会被执行，例如通过 png 图片进行的 PDF 预览。 该漏洞利用直接在 pngXXm 预览中渲染命令，其基于 https://github.com/hhc0null/GhostRule/blob/master/ghostrule1.ps。 dSafer 标志会被覆盖，从而可通过 .pdfhookDSCCreator 使用 .forceput 执行任意命令。请参见下方截图。...

MiracleLinux 9 : ghostscript-9.54.0-11.el9 (AXSA:2023-6559:04)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6559:04 advisory. Ghostscript: GhostPDL can lead to remote code execution via crafted PostScript documents CVE-2023-43115 Tenable has extracted the preceding description block...

SUSE CVE-2010-4820

Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055...

ghostscript: incomplete fix for CVE-2018-16509

It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant of the flaw and bypass the -dSAFER protection to, for example, execute arbitrary shell commands via a specially crafted PostScript document...

CVE-2018-16509

An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction...

Code execution via PDF and PS in KDE

Command contained in PS and PDF files may be eceuted...