CVE-2024-29506
Artifex
CVE-2024-29506 is a high-severity vulnerability affecting Artifex Ghostscript before version 10.03.0, characterized by a stack-based buffer overflow. The vulnerability resides in the pdfi_apply_filter() function and is triggered by an excessively long PDF filter name. This buffer overflow can lead to arbitrary code execution.
Although the CVSS score is 8.8 (High), the SOCRadar Vulnerability Risk Score (SVRS) of 77 indicates a significant risk, suggesting potential for active exploitation. While not in the critical range (above 80), the proximity to the threshold and its presence "In The Wild" amplifies the need for prompt patching and mitigation strategies. The presence of CWE-787 further clarifies the nature of the memory corruption leading to potential system compromise. Organizations utilizing Ghostscript should prioritize updating to version 10.03.0 or later to eliminate this attack vector and prevent potential breaches. Ignoring this could result in significant system instability and data compromise.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.