Remote Code Execution

2024-05-1820:55:19

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

ghostscript

pdf

remote code execution

denial of service

arbitrary code

vulnerability

7.9 High

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

Ghostscript, the GPL PostScript/PDF interpreter is vulnerable to Remote Code Execution. The vulnerability is due to multiple security issues which can result in denial of service and potentially the execution of arbitrary code if malformed document files are processed.

CPENameOperatorVersion
ghostscript:bullseyeeq9.52.1~dfsg-1
ghostscript:sideq9.53.3~dfsg-5
ghostscript:bullseyeeq9.52.1~dfsg-1
ghostscript:sideq9.53.3~dfsg-5
ghostscript:edgeeq9.54.0-r1
ghostscript:edgeeq10.01.1-r1
ghostscript:edgeeq10.02.1-r0
ghostscript:edgeeq9.51-r0
ghostscript:edgeeq9.55.0-r0
ghostscript:edgeeq10.02.0-r1

Name	Operator	Version
ghostscript:bullseye	eq	9.52.1~dfsg-1
ghostscript:sid	eq	9.53.3~dfsg-5
ghostscript:bullseye	eq	9.52.1~dfsg-1
ghostscript:sid	eq	9.53.3~dfsg-5
ghostscript:edge	eq	9.54.0-r1
ghostscript:edge	eq	10.01.1-r1
ghostscript:edge	eq	10.02.1-r0
ghostscript:edge	eq	9.51-r0
ghostscript:edge	eq	9.55.0-r0
ghostscript:edge	eq	10.02.0-r1