Multiple vulnerabilities in Artifex Ghostscript

Published: 2023-10-12 | Updated: 2024-01-30

Risk	High
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2023-43115 CVE-2023-38560
CWE-ID	CWE-676 CWE-190
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	Ghostscript Universal components / Libraries / Libraries used by multiple products
Vendor	Artifex Software, Inc.

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Use of Potentially Dangerous Function

EUVDB-ID: #VU81977

Risk: High

CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-43115

CWE-ID: CWE-676 - Use of Potentially Dangerous Function

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists in gdevijs.c in GhostPDL due to the way PostScript handles IJS device change. A remote attacker can trick the victim to open a specially crafted document that will switch to the IJS device, start the IJS server and execute arbitrary commands on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Ghostscript: 10.0.0 - 10.01.2

External links

http://bugs.ghostscript.com/show_bug.cgi?id=707051
http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
http://ghostscript.com/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Integer overflow

EUVDB-ID: #VU85892

Risk: Medium

CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-38560

CWE-ID: CWE-190 - Integer overflow