Latest Ghostscript vulnerability haunts experts as the next big breach enabler

Infosec experts are warning about a critical vulnerability in Ghostscript, a widely used Postscript and Adobe PDF interpreter. Tracked as CVE-2024-29510, the vulnerability allows remote code execution (RCE) after bypassing the default sandbox. The flaw was reported in March and fixed in April's version 10.03.1. Ghostscript is integral to various web applications and services for document conversion and preview functionalities. Despite being initially rated as medium severity, experts argue that the exploit could have a more severe impact, potentially allowing attackers to read, write files, and achieve RCE on affected systems. The vulnerability has raised concerns about inaccurate severity assessments by organizations like Tenable and Red Hat, with some experts believing the exploit could be more severe than the assigned CVSS score of 5.5. This is the second significant RCE vulnerability in Ghostscript within a year, emphasizing the importance of promptly applying patches to mitigate the risk of potential breaches. Organizations are urged to prioritize addressing this vulnerability to prevent exploitation.