REDHAT-BUG-2241108: High severity ghostscript vulnerability
In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote code execution via crafted PostScript documents because they can switch to the IJS device, or change the IjsServer parameter, after SAFER has been activated.
References: https://bugs.ghostscript.com/showbug.cgi?id=707051 https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5 https://ghostscript.com/
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2241108?
The severity of REDHAT-BUG-2241108 is critical due to its potential for remote code execution.
How do I fix REDHAT-BUG-2241108?
To fix REDHAT-BUG-2241108, update Artifex Ghostscript and GhostPDL to versions higher than 10.01.2.
What vulnerable products are affected by REDHAT-BUG-2241108?
Artifex Ghostscript and GhostPDL versions up to and including 10.01.2 are affected by REDHAT-BUG-2241108.
What type of attack does REDHAT-BUG-2241108 allow?
REDHAT-BUG-2241108 allows an attacker to execute remote code via specially crafted PostScript documents.
Is REDHAT-BUG-2241108 related to a specific functionality in Ghostscript?
Yes, REDHAT-BUG-2241108 is related to the IJS device functionality and its interaction with the SAFER security model.