Lucene search

K

MitreVULNRICHMENT:CVE-2024-33869

HistoryJul 03, 2024 - 12:00 a.m.

CVE-2024-33869

2024-07-0300:00:00

mitre

github.com

3

artifex ghostscript

path traversal

command execution

postscript document

path reduction

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/…/%pipe%command# output filename.

References

bugs.ghostscript.com/show_bug.cgi?id=707691

www.openwall.com/lists/oss-security/2024/06/28/2

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-33869

ubuntucve1 cvelist1 osv4 alpinelinux1 redhatcve1 cve1 nvd1 debiancve1 wolfi1 amazon1 nessus17 openvas12 redhat2 oraclelinux1 almalinux1 mageia1 fedora2 debian1 ubuntu1