CVE-2024-29507
Advisory lineage Upstream: 0 Downstream: 4
Analyzed
Published: 03 Jul 2024, 00:00
Last modified:03 Dec 2024, 15:41
Vulnerability Summary
Overall Risk (default)
low
22/100 CVSS Score
5.4 MEDIUM
v3.1 (cve.org)
EPSS Score
0.11% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
03 Jul 2024, 00:00
Published
Vulnerability first disclosed
03 Dec 2024, 15:41
Last Modified
Vulnerability information updated
Description
Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.4CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
EPSS Trends
Current EPSS score: 0.11%• Percentile: 30%
Techniques & Countermeasures
- CWE-120•Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Affected Systems
- Unknown•Ghostscript
< 10.03.0