Arbitrary Code Execution Vulnerability in Artifex Ghostscript

CVE-2024-33871

What is CVE-2024-33871?

A vulnerability exists in Artifex Ghostscript versions before 10.03.1, where attackers can execute arbitrary code by exploiting a weakness in the 'Driver' parameter for opvp and oprp devices. This vulnerability stems from the ability for the Driver parameter to accept arbitrary names for dynamic libraries, which can be manipulated through a specially crafted PostScript document. When exploited, this can lead to severe security risks, allowing unauthorized actions on the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

News Articles

GBHackers News

CVE-2024-33871CVE-2024-41110

Multiple Flaws in Dell PowerProtect Allow System Compromise

Dell has released a Critical Security Update (DSA-2025-022) for its PowerProtect Data Domain (DD) systems to address multiple vulnerabilities.

References