CVE-2023-36664

Summary

CVE-2023-36664 is a vulnerability affecting Artifex Ghostscript up to version 10.01.2. This issue involves improper permission validation for pipe devices. Specifically, the software fails to adequately verify access permissions for inputs with the %pipe% prefix or the | pipe character prefix, potentially allowing unauthorized access or execution of malicious code. This could lead to a range of undesirable outcomes, including data breaches or system compromise. Users are strongly advised to update to the latest version of Ghostscript to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.