3 ms·
Is there a 'ghostscript' server I dont know about ? Where is the "Remote" in this RCE ?
by worthless-trash 3y ago
Is there a 'ghostscript' server I dont know about ?
Where is the "Remote" in this RCE ?
- tinus_hn 3y agoAirPrint is ‘send pdf to the printer and it prints’ and there is a million cloud or cloud like services that use Ghostscript to create thumbnails.
- justinclift 3y agoGhostscript seems to be often used as a backend tool in automated pipelines. So, the whole RCE thing is probably pretty true in this case.
- worthless-trash 3y agoIf we classify flaws this way though, everything is access able to be accessed via ssh, etc. CVE flaws have an an 'environment' section for exactly this purpose.
- justinclift 3y agoYeah, that's a fair point. They might be stressing the "remote" bit though, just so it sinks in for people using it as part of a document conversion pipeline or something. But, that's just me guessing wildly. :)
- rlupi 3y agoI wonder if it is used in phones.
- deleted 3y ago[deleted]