Sploitus

Exploit for Protection Mechanism Failure in Artifex Ghostscript

githubexploit Β· 2024-07-09

Exploit Code

README2 lines
## https://sploitus.com/exploit?id=F106F007-FC08-550E-8673-3EC5C314C305
PoC exploit for CVE-2024-29510, a Ghostscript format string vulnerability. The target product/service is Ghostscript, a PostScript interpreter, and the vulnerability class/vector is format string. The probable entry point is the `run_ps2pdf` function in `app.py`, which is invoked when the `/upload` endpoint is accessed via a POST request. The `run_ps2pdf` function uses the `sp.run` function to execute the `ps2pdf` command, which is vulnerable to format string attacks. The exploit is likely to be triggered by uploading a specially crafted PostScript file to the `/upload` endpoint. The expected impact of the exploit is remote code execution.