https://seclists.org/oss-sec/2024/q3/21: Ghostscript 10.03.1 (2024-05-02) fixed 5 CVEs including CVE-2024-33871 arbitrary code execution
Published Jul 3, 2024
·Updated
Affected Software
1 affected component
Ghostscript Ghostscript
Frequently Asked Questions
1
What is the severity of CVE-2024-29509?
CVE-2024-29509 is classified as a high severity vulnerability due to its potential for arbitrary code execution via a heap buffer overflow.
2
How do I fix CVE-2024-29509?
To fix CVE-2024-29509, users should upgrade to the latest version of Ghostscript that addresses this vulnerability.
3
What is CVE-2024-29506?
CVE-2024-29506 is a stack buffer overflow vulnerability in the pdfi_apply_filter() function within Ghostscript.
4
What are the potential impacts of CVE-2024-29506?
CVE-2024-29506 could lead to arbitrary code execution if exploited, compromising system integrity.
5
Is there a patch available for CVE-2024-29506?
Yes, a patch for CVE-2024-29506 is included in the latest release of Ghostscript.