7 ms·

CVE-2024-29510 – Exploiting Ghostscript using format strings

• pryelluw 2y ago
  Friendly question given the fatigue around bs critical CVEs. Is this properly rated?
  • pvg 2y ago
    The article describes the vulnerability in some detail so you don't have to rely on the rating at all. In fact, you can completely ignore any mention of CVEs lose nothing.
  • nieve 2y ago
    It allows full RCE from an uploaded or opened file. That seems reasonably critical to me.
    • out_of_protocol 2y ago
      Does this work with .pdf files? i.e. attacker uploads evil.pdf
      • llimllib 2y ago
        yes, also with .eps files
    • worthless-trash 2y ago
      Thats.. in bad faith. If thats the qualification for "remote" then you can say that every attack is remote and it clearly isnt.
  • SkyPuncher 2y ago
    If I see a vulnerability in Ghostscript, I basically assume is full RCE at this point..
• mistrial9 2y ago
  for v10.03 or less from the article.. patched in Debian systems last May ? https://tracker.debian.org/pkg/ghostscript https://tracker.debian.org/pkg/ghostscript
• olliej 2y ago
  %n strikes again. I believe that by default on osx %n is only respected if the format string is in readonly memory, I thought the default in Linux was to just ignore it?