Buffer Overflow Vulnerability in Ghostscript - CVE-2024-46952
Summary
CVE-2024-46952: An issue was discovered in pdf/pdf_xref.c in Artifex Ghostscript before 10.04.0. Affects ghostscript versions < 10.04.0-r0. Fixed in 10.04.0-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an interpreter for the PostScript language and for PDF. It is widely used for processing PDF files and converting them to various formats. The software is integral in many applications that require document manipulation and rendering. However, prior to version 10.04.0, Ghostscript was found to have a critical vulnerability that could be exploited under certain conditions.
Vulnerability Detail
CVE-2024-46952 is a buffer overflow vulnerability discovered in the pdf/pdf_xref.c file of Artifex Ghostscript versions before 10.04.0. This vulnerability arises during the handling of a PDF XRef stream, specifically related to W array values. An attacker could exploit this vulnerability to execute arbitrary code, potentially leading to system compromise. The risk is particularly high for applications that process untrusted PDF files, as the overflow could allow for remote code execution.
How To Fix
Minimum fixed version
10.04.0-r0
This is the first release that contains the fix.
sudo apk add --upgrade ghostscriptTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users are advised to avoid processing untrusted PDF files until the package is updated. Additionally, implementing strict input validation and sanitization can help mitigate the risk of exploitation.
Conclusion
CVE-2024-46952 represents a significant security risk for users of Ghostscript prior to version 10.04.0. It is crucial for users to update their installations to the latest version to protect against potential exploitation. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for ghostscript →
FAQ
CVE-2024-46952 is a buffer overflow vulnerability in Ghostscript that affects versions prior to 10.04.0, allowing potential remote code execution.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The primary risk is remote code execution, which could allow attackers to gain control over the affected system, leading to data breaches or further exploitation.
Yes, the patch is included in Ghostscript version 10.04.0 and later. Users should update to this version to mitigate the vulnerability.
If immediate updates are not possible, avoid processing untrusted PDF files and implement input validation as a temporary measure.
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
