CVE-2024-29510

medium

Description

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

References

https://www.theregister.com/2024/07/05/ghostscript_vulnerability_severity/

https://securityboulevard.com/2024/07/ghostscript-vulnerabilities-patched-in-recent-ubuntu-updates/?web_view=true

https://www.openwall.com/lists/oss-security/2024/07/03/7

https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/

https://bugs.ghostscript.com/show_bug.cgi?id=707662

Details

Source: Mitre, NVD

Published: 2024-07-03

Updated: 2024-07-08

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 6.3

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Severity: Medium