Beveiligingsadvies

CVE-2024-33869

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-07-03 00:00:00

Laatst bijgewerkt 2024-10-31 17:23:01

Toegewezen door mitre

CVSS-score 5.3

Status PUBLISHED

Beschrijving

An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.

← Alle CVE's bekijken Bekijk op cve.org ↗