VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 18, 2023· Updated Aug 2, 2024

CVE-2023-43115

CVE-2023-43115

Description

Ghostscript through 10.01.2 allows remote code execution via crafted PostScript documents that switch to the IJS device or change IjsServer parameter after SAFER activation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Ghostscript through 10.01.2 allows remote code execution via crafted PostScript documents that switch to the IJS device or change IjsServer parameter after SAFER activation.

Vulnerability

In Artifex Ghostscript versions through 10.01.2, the file gdevijs.c in GhostPDL contains a vulnerability that allows a crafted PostScript document to switch to the IJS device or change the IjsServer parameter after the SAFER sandbox has been activated. This bypasses the intended security restrictions.

Exploitation

An attacker can deliver a malicious PostScript document to a victim. When processed by Ghostscript, the document can invoke the IJS device or modify the IjsServer parameter, even though SAFER mode is active. No additional authentication or network position is required beyond the ability to supply the document.

Impact

Successful exploitation leads to remote code execution (RCE) with the privileges of the Ghostscript process. The attacker can execute arbitrary commands on the target system.

Mitigation

As of the publication date (2023-09-18), the vulnerability affects Ghostscript through 10.01.2. Users should upgrade to a patched version if available. The vendor has noted that the IJS server can be specified on the command line, and the IJS device inherently must execute a command to start the IJS server, indicating a design limitation. No specific workaround is provided in the available references.

AI Insight generated on May 27, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

40

Patches

0

No patches discovered yet.

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

5

News mentions

0

No linked articles in our index yet.