Heap-buffer-overflow in ghostscript: pdf_save_viewer_state
Summary
OSV-2024-503: Heap-buffer-overflow in pdf_save_viewer_state. Affects ghostscript versions >= 2422afa72801603247b6a748ea32ca2ce9443ecd, < 647ad9344e825e7495fd5dc4b9d466d37d6f97e8. Fixed in 647ad9344e825e7495fd5dc4b9d466d37d6f97e8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is widely used for rendering and converting PostScript and PDF files. The vulnerability in question affects the pdf_save_viewer_state function within Ghostscript. This function is responsible for saving the state of the PDF viewer. The vulnerability allows for a heap-buffer-overflow WRITE of 8 bytes, which can lead to a crash.
Vulnerability Detail
The vulnerability arises due to a heap-buffer-overflow WRITE of 8 bytes in the pdf_save_viewer_state function. This can be triggered when processing certain PDF files. An attacker could potentially exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition. The vulnerability was discovered through the OSS-Fuzz project, and the affected version of Ghostscript can be found in the Git repository at git://git.ghostscript.com/ghostpdl.git, with the introduced commit being 2422afa72801603247b6a748ea32ca2ce9443ecd.
How To Fix
Minimum fixed version
647ad9344e825e7495fd5dc4b9d466d37d6f97e8
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
At present, there is no known workaround for this vulnerability. It is crucial to update to a patched version of Ghostscript as soon as possible.
Conclusion
In conclusion, the heap-buffer-overflow vulnerability in Ghostscript's pdf_save_viewer_state function poses a significant risk. It is crucial to update to a patched version of Ghostscript to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ghostscript →
FAQ
Ghostscript is an open-source interpreter for the PostScript language and the PDF file format. It is commonly used for rendering and converting PostScript and PDF files.
The vulnerability manifests as a heap-buffer-overflow WRITE of 8 bytes in the pdf_save_viewer_state function of Ghostscript.
This vulnerability could allow an attacker to execute arbitrary code or cause a denial-of-service condition.
The vulnerability was discovered through the OSS-Fuzz project, which focuses on fuzzing open-source software to uncover vulnerabilities.
No, there is currently no known workaround for this vulnerability. Updating to a patched version of Ghostscript is the recommended course of action.
References
Related vulnerabilities
Recent vulnerabilities recorded for ghostscript.
