跳转到帖子

Ghostscript Command Execution via Format String

recommended_posts

发布于
  • Members

Ghostscript Command Execution via Format String

Disclosed
03/14/2024
Created
07/19/2024

Description

This module exploits a format string vulnerability in Ghostscript versions before 10.03.1 to achieve a SAFER sandbox bypass and execute arbitrary commands. This vulnerability is reachable via libraries such as ImageMagick. This exploit only works against Ghostscript versions 10.03.0 and 10.01.2. Some offsets adjustement will probably be needed to make it work with other versions.

Author(s)

  • Thomas Rinsma
  • Christophe De La fuente

Platform

Linux,Unix,Windows

Architectures

cmd, x86, x64

Development

  • Source Code
  • History
  • 查看数 704
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。
注意:你的帖子需要版主批准后才能看到。

游客
回帖…