CVE-2024-29510 – Exploiting Ghostscript using format strings

https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/

by ThomasRinsma • 2 years ago

41 9 2 years ago

codeanlabs.com

mistrial9• 2 years ago

for v10.03 or less from the article.. patched in Debian systems last May ?

https://tracker.debian.org/pkg/ghostscript

pryelluw• 2 years ago

Friendly question given the fatigue around bs critical CVEs. Is this properly rated?

pvg• 2 years ago

The article describes the vulnerability in some detail so you don't have to rely on the rating at all. In fact, you can completely ignore any mention of CVEs lose nothing.

nieve• 2 years ago

It allows full RCE from an uploaded or opened file. That seems reasonably critical to me.

out_of_protocol• 2 years ago

Does this work with .pdf files? i.e. attacker uploads evil.pdf

worthless-trash• 2 years ago

Thats.. in bad faith.

If thats the qualification for "remote" then you can say that every attack is remote and it clearly isnt.

SkyPuncher• 2 years ago

If I see a vulnerability in Ghostscript, I basically assume is full RCE at this point..

olliej• 2 years ago

%n strikes again.

I believe that by default on osx %n is only respected if the format string is in readonly memory, I thought the default in Linux was to just ignore it?

CVE-2024-29510 – Exploiting Ghostscript using format strings

Related Stories