Infosec circles are abuzz with talk of a Ghostscript vulnerability that some experts believe could be the cause of several major breaches in the coming months.
Ghostscript – The Ultimate Guide to Getting Started & Install Ghostscript
Ghostscript is a Postscript and Adobe PDF interpreter that allows users of *nix, Windows, MacOS and various embedded operating systems and platforms to view, print and convert PDF and image files. It is a default installation in many distros, as well as used indirectly by other packages to support printing or conversion operations.
Tracked as CVE-2024-29510 (Tenable designated it as CVSS 5.5 – medium), the format string bug was originally reported to the Ghostscript team in March and later fixed in April's version 10.03.1 of the open source interpreter for PostScript and PDF files.
But the blog of the researcher who discovered the flaw has sparked the first major wave of interest in the vulnerability since it became public.
