News for hackers. Stuff that matters.
Re:CVE-2024-29510 – Exploiting Ghostscript using format strings by mistrial9 on Tuesday July 02, 2024 @02:23PM (#40859173)
for v10.03 or less from the article.. patched in Debian systems last May ?

https://tracker.debian.org/pkg/ghostscript

[ Parent | on HN ]
Re:CVE-2024-29510 – Exploiting Ghostscript using format strings by pryelluw on Tuesday July 02, 2024 @02:24PM (#40859180)
Friendly question given the fatigue around bs critical CVEs. Is this properly rated?
[ Parent | on HN ]
Re:CVE-2024-29510 – Exploiting Ghostscript using format strings by nieve on Tuesday July 02, 2024 @03:07PM (#40859560)
It allows full RCE from an uploaded or opened file. That seems reasonably critical to me.
[ Parent | on HN ]
Re:CVE-2024-29510 – Exploiting Ghostscript using format strings by out_of_protocol on Tuesday July 02, 2024 @04:38PM (#40860202)
Does this work with .pdf files? i.e. attacker uploads evil.pdf
[ Parent | on HN ]
Re:CVE-2024-29510 – Exploiting Ghostscript using format strings by llimllib on Wednesday July 03, 2024 @08:37AM (#40865369)
yes, also with .eps files
[ Parent | on HN ]
Re:CVE-2024-29510 – Exploiting Ghostscript using format strings by worthless-trash on Tuesday July 09, 2024 @04:42AM (#40913799)
Thats.. in bad faith.

If thats the qualification for "remote" then you can say that every attack is remote and it clearly isnt.

[ Parent | on HN ]
Re:CVE-2024-29510 – Exploiting Ghostscript using format strings by pvg on Tuesday July 02, 2024 @02:41PM (#40859325)
The article describes the vulnerability in some detail so you don't have to rely on the rating at all. In fact, you can completely ignore any mention of CVEs lose nothing.
[ Parent | on HN ]
Re:CVE-2024-29510 – Exploiting Ghostscript using format strings by SkyPuncher on Tuesday July 02, 2024 @06:17PM (#40860959)
If I see a vulnerability in Ghostscript, I basically assume is full RCE at this point..
[ Parent | on HN ]
Re:CVE-2024-29510 – Exploiting Ghostscript using format strings by olliej on Tuesday July 02, 2024 @11:14PM (#40862427)
%n strikes again.

I believe that by default on osx %n is only respected if the format string is in readonly memory, I thought the default in Linux was to just ignore it?

[ Parent | on HN ]