cve/2023/CVE-2023-36664.md

### [CVE-2023-36664](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36664)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/BC-SECURITY/Moriarty
- https://github.com/JeanChpt/CVE-2023-36664
- https://github.com/SrcVme50/Hospital
- https://github.com/churamanib/CVE-2023-36664-Ghostscript-command-injection
- https://github.com/izj007/wechat
- https://github.com/jakabakos/CVE-2023-36664-Ghostscript-command-injection
- https://github.com/jeanchpt/CVE-2023-36664
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/winkler-winsen/Scan_GhostScript