Описание
An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 10.02.1~dfsg1-0ubuntu9 |
| esm-infra/bionic | needs-triage | |
| esm-infra/focal | not-affected | 9.50~dfsg-5ubuntu4.12 |
| esm-infra/xenial | needs-triage | |
| focal | released | 9.50~dfsg-5ubuntu4.12 |
| jammy | released | 9.55.0~dfsg1-0ubuntu5.7 |
| mantic | released | 10.01.2~dfsg1-0ubuntu2.3 |
| noble | released | 10.02.1~dfsg1-0ubuntu7.1 |
| oracular | released | 10.02.1~dfsg1-0ubuntu9 |
| plucky | released | 10.02.1~dfsg1-0ubuntu9 |
Показывать по
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.
An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.
An issue was discovered in Artifex Ghostscript before 10.03.1. Path tr ...
An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.
Уязвимость файла base/gpmisc.c набора программного обеспечения для обработки, преобразования и генерации документов Ghostscript, связанная с неправильной проверкой входных данных, позволяющая нарушителю выполнить произвольный код в системе
EPSS
5.3 Medium
CVSS3