CVE-2024-46953
Severity
7.8HIGH
EPSS
0.1%
top 69.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 10
Latest updateDec 5
Description
An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0. An integer overflow when parsing the filename format string (for the output filename) results in path truncation, and possible path traversal and code execution.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages5 packages
Also affects: Debian Linux 12.0, Linux Enterprise 12
Patches
🔴Vulnerability Details
4📋Vendor Advisories
4Red Hat
▶
Debian▶
CVE-2024-46953: ghostscript - An issue was discovered in base/gsdevice.c in Artifex Ghostscript before 10.04.0...↗2024