There's also chatter about whether medium severity scare is actually code red nightmare
Infosec circles are awash with chatter about a vulnerability in Ghostscript some experts believe could be the cause of several major breaches in the coming months.
However, the blog of the researcher who discovered the flaw has sparked the first major wave of interest in the vulnerability since it became public. Here he's referring to Ghostscript's wide-ranging use across the web. Most commonly it's found powering functionality such as preview images in cloud storage and chat programs, and is often invoked when these images are rendered. It's also heavily used in tasks such as PDF conversion and printing, and can be found powering optical character recognition workflows too.
"The PoC Codean Labs has shared is an EPS file, and so any image conversion service or workflow which is compatible with EPS could be exploited to achieve RCE," Robinson said. "Comparing this to CVE-2023-36664, an earlier GhostScript RCE, which was listed as high risk for integrity, availability, and confidentiality, it seems more correct for an RCE," said Robinson.
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Election latest: Audience shouts 'shame' as PM endures tough end to latest TV showdownRishi Sunak has said he's 'incredibly angry' about allegations Conservative candidates placed bets on the date of the general election. The prime minister and other party leaders faced voters on a special edition of the BBC's Question Time.
Read more »
Euro 2024 latest: European giants poised for quarter-finals plus latest England newsBuild-up as Euro 2024's quarter-finals get under way on Friday with Spain v Germany and Portugal v France, plus the latest build-up to England v Switzerland on Saturday.
Read more »
latest: Trump attacks 'grossly incompetent' president - as Biden vows to stay in election raceDemocrats are questioning whether Joe Biden should continue his re-election bid after a debate 'disaster' against Donald Trump. But reports suggest the president is committed to debating Trump again.
Read more »
Meghan Markle's latest move will 'bring sighs of relief' to Buckingham PalaceThe Duchess of Sussex recently launched her new lifestyle brand, American Riviera Orchard, which is said to have relieved the monarchy.
Read more »
What's triggered the latest flashpoint between Jos Verstappen and Christian Horner?Just as peace appeared to have been brokered at Red Bull, that all seemingly came to an abrupt end on Friday.
Read more »
Election latest: Farage on defensive after supporters caught on camera making racist, murderous and homophobic remarksRishi Sunak has spoken out after a Reform UK supporter was filmed making racist comments about him - with party leader Nigel Farage forced on to the defensive. Meanwhile, Sir Keir Starmer has distanced himself from a Labour colleague's previous criticism of Donald Trump.
Read more »