cve/2023/CVE-2023-36664.md

CVE-2023-36664

Description

Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).

POC

Reference

No PoCs from references.

Github

• https://github.com/BC-SECURITY/Moriarty
• https://github.com/JeanChpt/CVE-2023-36664
• https://github.com/SrcVme50/Hospital
• https://github.com/izj007/wechat
• https://github.com/jakabakos/CVE-2023-36664-Ghostscript-command-injection
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/winkler-winsen/Scan_GhostScript