TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Critical RCE found in popular Ghostscript open-source PDF library

102 点作者 thedday将近 2 年前

6 条评论

favorited将近 2 年前
My favorite RCE, FORCEDENTRY[0], also involved PDFs. It was the first time I was truly in awe of an exploit.<p>Through a combination of (1) an integer overflow in an open-source PDF compression library, (2) a Turing-complete compression codec, and (3) CoreGraphics noticing that the &quot;gif&quot; in your iMessage is actually a PDF and helpfully decoding it for you, NSO was able to bootstrap a purpose-built virtual machine, upon which they ran their sandbox-escape.<p>I highly recommend reading this post[1] by Project Zero if you haven&#x27;t already.<p>[0]<a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;FORCEDENTRY" rel="nofollow noreferrer">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;FORCEDENTRY</a><p>[1]<a href="https:&#x2F;&#x2F;googleprojectzero.blogspot.com&#x2F;2021&#x2F;12&#x2F;a-deep-dive-into-nso-zero-click.html" rel="nofollow noreferrer">https:&#x2F;&#x2F;googleprojectzero.blogspot.com&#x2F;2021&#x2F;12&#x2F;a-deep-dive-i...</a>
arkadiyt将近 2 年前
I&#x27;ve said it before and I&#x27;ll say it again: ghostscript will never be safe, ever.<p>If you must run it then make it 100% isolated, for instance in a lambda with no api credentials or IAM permissions, &amp; do s3 input&#x2F;output by passing presigned urls. Make it ok to have RCE.
评论 #36719585 未加载
nicolas_17将近 2 年前
The article is from yesterday and at first it scared me into thinking it was yet another vulnerability. Turns out it&#x27;s from weeks ago and Debian patched it 10 days ago. Whew.
评论 #36717884 未加载
worthless-trash将近 2 年前
Is there a &#x27;ghostscript&#x27; server I dont know about ?<p>Where is the &quot;Remote&quot; in this RCE ?
评论 #36718927 未加载
评论 #36722388 未加载
评论 #36724315 未加载
评论 #36720233 未加载
eviks将近 2 年前
Is there any good replacement to this awful PDF format on the horizon?
评论 #36724228 未加载
hulitu将近 2 年前
RCE ? Since when is ghostscript a web browser ?
评论 #36716770 未加载
评论 #36716837 未加载
评论 #36716745 未加载