CVE-2018-16509 PoC — Artifex Ghostscript 安全漏洞

Source

https://github.com/knqyf263/CVE-2018-16509

Associated Vulnerability

Title: Artifex Ghostscript 安全漏洞 (CVE-2018-16509)
Description:An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handling of /invalidaccess exceptions could be used by attackers able to supply crafted PostScript to execute code using the "pipe" instruction.

Description

CVE-2018-16509 (Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities)

Readme

# CVE-2018-16509
Ghostscript contains multiple -dSAFER sandbox bypass vulnerabilities

## Run

```
$ docker run -d --name cve-2018-16509 -p 9000:9000 cve-2018-16509
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →