CVE-2024-33869

2024-07-0300:00:00

mitre

www.cve.org

artifex ghostscript 10.03.1

path traversal

command execution

crafted postscript document

path reduction

%pipe% restrictions

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/…/%pipe%command# output filename.