🦑Exploit: index : ghostpdl.git
CVE-2024-46951

See bug report for details.

Diffstat
-rw-r--r--  psi/zcolor.c  3  
1 files changed, 3 insertions, 0 deletions
diff --git a/psi/zcolor.c b/psi/zcolor.c
index d4e7a4438..d3384d75d 100644
--- a/psi/zcolor.c
+++ b/psi/zcolor.c
@@ -5276,6 +5276,9 @@ static int patterncomponent(i_ctx_t * i_ctx_p, ref *space, int *n)
             code = array_get(imemory, pImpl, 0, &pPatInst);
             if (code < 0)
                 return code;
+
+            if (!r_is_struct(&pPatInst) || (!r_has_stype(&pPatInst, imemory, st_pattern1_instance) && !r_has_stype(&pPatInst, imemory, st_pattern2_instance)))
+                return_error(gs_error_typecheck);
             cc.pattern = r_ptr(&pPatInst, gs_pattern_instance_t);
             if (pattern_instance_uses_base_space(cc.pattern))
                 *n = n_comps;

@UndercodeCommunity
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁

⚡️ #Google and #Samsung are Teaming Up for a New XR

https://undercodenews.com/google-and-samsung-are-teaming-up-for-a-new-xr/

@Undercode_News

🔍 Chat Control: A Controversial EU Plan to Scan Your Encrypted Chats

https://undercodenews.com/chat-control-a-controversial-eu-plan-to-scan-your-encrypted-chats/

@Undercode_News

🔴 #Qualcomm #Windows WLAN Host Improper Restriction of Operations within the Bounds of a Memory Buffer (#CVE-2024-43053) - High

https://dailycve.com/qualcomm-windows-wlan-host-improper-restriction-of-operations-within-the-bounds-of-a-memory-buffer-cve-2024-43053-high/

@DailyCVE

🔴 #Apple #iOS, Unexpected App Termination Vulnerability, #CVE-2024-27879 (Critical)

https://dailycve.com/apple-ios-unexpected-app-termination-vulnerability-cve-2024-27879-critical/

@Daily_CVE

🔴 #macOS, Out-of-Bounds Write Vulnerability, #CVE-2024-40841 (Critical)

https://dailycve.com/macos-out-of-bounds-write-vulnerability-cve-2024-40841-critical/

@Daily_CVE

🔴 #macOS, #iOS, iPadOS Vulnerability: Race Condition in Archive Unpacking (#CVE-2024-27876 - Critical)

https://dailycve.com/macos-ios-ipados-vulnerability-race-condition-in-archive-unpacking-cve-2024-27876-critical/

@Daily_CVE

🔵 #Linux Kernel Out-of-Bounds Memory Access Vulnerability (#CVE-2024-53108)

https://dailycve.com/linux-kernel-out-of-bounds-memory-access-vulnerability-cve-2024-53108/

@Daily_CVE

🟠 #Linux Kernel, Integer Overflow, #CVE-2024-53107 (Moderate)

https://dailycve.com/linux-kernel-integer-overflow-cve-2024-53107-moderate/

@Daily_CVE

🟠 #Apple Xcode (Updated) Privacy Issue (#CVE-2024-40862) Medium

https://dailycve.com/apple-xcode-updated-privacy-issue-cve-2024-40862-medium/

@Daily_CVE

#Samsung's Project Moohan: A Glimpse into the Future of XR

https://undercodenews.com/samsungs-project-moohan-a-glimpse-into-the-future-of-xr/

@Undercode_News

📱 #Apple's M4 MacBook Air: A Closer Look

https://undercodenews.com/apples-m4-macbook-air-a-closer-look/

@Undercode_News

🔋 Supercharge Your Workflow: Latest Enhancements to #GitHub #Copilot in VS Code

https://undercodenews.com/supercharge-your-workflow-latest-enhancements-to-github-copilot-in-vs-code/

@Undercode_News

📱 Convincing Billions to Embrace Passkeys: #Microsoft's UX-Driven Approach

https://undercodenews.com/convincing-billions-to-embrace-passkeys-microsofts-ux-driven-approach/

@Undercode_News

Spanish Police Bust Large-Scale Vishing Scam Ring

https://undercodenews.com/spanish-police-bust-large-scale-vishing-scam-ring/

@Undercode_News

ARK Invest Trims #Tesla Holdings Despite Bullish Outlook

https://undercodenews.com/ark-invest-trims-tesla-holdings-despite-bullish-outlook/

@Undercode_News

🦑Simulate Attack with Atomic Red Team:

What is Atomic Red Teams?
According to their Github pages, Atomic Red Team is a library of tests mapped to the MITRE ATT&CK framework. Security teams can use Atomic Red Team to quickly, portably, and reproducibly test their environments.

Prerequisites

>Virtual Machine with NAT Connection (Dont Use your Real Own PC).

>Windows Operating System (in this tutorial we are using Win10 Pro).

>Disabled Antivirus and Exclusion The

>EDR Script Onboarding
(If you want to deploy with local script deployment)

🦑Powershell to execute the command
Step-By-Step:

Login to your VM. Prepare the Environment first with disabling the Antivirus. Right Click Windows PowerShell > Run As Admin PowerShell

1️⃣

Set-ExecutionPolicy Bypass -Scope CurrentUser

ExecutionPolicy Bypass