Artifex Ghostscript: (CVE-2024-29510) Memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

Artifex Ghostscript: (CVE-2024-29510) Memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

07/03/2024

Created

11/21/2024

Added

11/19/2024

Modified

11/19/2024

Description

Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.

Solution(s)

• ghostscript-upgrade-10_03_1

References

• https://attackerkb.com/topics/cve-2024-29510
• CVE - 2024-29510