Artifex Ghostscript Print Buffer Overflow Vulnerability in BJ10V Device

A buffer overflow vulnerability in the print function of the BJ10V device has been identified in Artifex Ghostscript versions prior to 10.05.0. This vulnerability arises from an integer overflow during buffer allocation, which can lead to the allocation of a buffer that is shorter than necessary, creating a buffer overflow condition.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a program to crash.

Reproduction

The vulnerability can be reproduced by using Ghostscript with the BJ10V device selected. An output file should be directed to /dev/null, and the 'bjbuf.ps' file should be processed. This will trigger the buffer overflow condition in the BJ10V device's print function.

Remediation

Users can upgrade to Ghostscript version 10.05.0 or later, where this vulnerability has been fixed.