CVE-2024-46951: High severity Artifex Ghostscript vulnerability
An issue was discovered in psi/zcolor.c in Artifex Ghostscript before 10.04.0. An unchecked Implementation pointer in Pattern color space could lead to arbitrary code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 10.0.0~dfsg-11+deb12u6 - Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 10.04.0~dfsg-1 - Upgrade
Upgrade
debian/ghostscriptto a version that resolves this vulnerability.Fixed in 10.0.0~dfsg-11+deb12u8Fixed in 10.05.1~dfsg-1+deb13u1Fixed in 10.05.1~dfsg-1+deb13u3Fixed in 10.08.0~dfsg-2 - Upgrade
Upgrade
alpine/ghostscriptto a version that resolves this vulnerability.Fixed in 10.04.0-r0 - Upgrade
Upgrade
Artifex Ghostscriptto a version that resolves this vulnerability.Fixed in 10.04.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46951?
CVE-2024-46951 has a high severity level due to its potential for arbitrary code execution.
How do I fix CVE-2024-46951?
To fix CVE-2024-46951, update Ghostscript to version 10.04.0 or later.
Which versions of Ghostscript are affected by CVE-2024-46951?
CVE-2024-46951 affects Ghostscript versions prior to 10.04.0.
Can CVE-2024-46951 be exploited remotely?
Yes, CVE-2024-46951 can be exploited remotely if the vulnerable Ghostscript software is accessible.
What impact does CVE-2024-46951 have on systems using Ghostscript?
CVE-2024-46951 can lead to arbitrary code execution, allowing an attacker to take control of affected systems.