HTTP: Artifex Ghostscript PostScript Handling s_xBCPE_process Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Artifex Ghostscript PostScript. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.

Extended Description

In Artifex Ghostscript through 10.01.0, there is a buffer overflow leading to potential corruption of data internal to the PostScript interpreter, in base/sbcp.c. This affects BCPEncode, BCPDecode, TBCPEncode, and TBCPDecode. If the write buffer is filled to one byte less than full, and one then tries to write an escaped character, two bytes are written.

Affected Products

Debian debian_linux

References

CVE: CVE-2023-28879

URL: https://artifex.com/news/critical-security-vulnerability-fixed-in-ghostscript

Short Name

HTTP:OVERFLOW:ARTEFX-POSTSCRPT

Severity

Major

Recommended

False

Recommended Action

None

HTTP: Artifex Ghostscript PostScript Handling s_xBCPE_process Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?