Test RCE Bug (CVE-2024-29510)

testrcebug.sh

#!/bin/bash
# Details: https://www.bleepingcomputer.com/news/security/rce-bug-in-widely-used-ghostscript-library-now-exploited-in-attacks/

if [ ! -f CVE-2024-29510_testkit.ps ]; then
cat > CVE-2024-29510_testkit.ps  << EOF
%!PS

% Run like this:
%   ghostscript -q -dBATCH -dNODISPLAY CVE-2024-29510_testkit.ps

% Make a new tempfile but only save its path. This gives us a file path to read/write 
% which will exist as long as this script runs. We don't actually use the file object
% (hence \`pop\`) because we're passing the path to uniprint and reopening it ourselves.
/PathTempFile () (w+) .tempfile pop def

{
        % Select uniprint device with custom format strings
        <<
                /OutputFile PathTempFile
                /OutputDevice /uniprint
                /upColorModel /DeviceCMYKgenerate
                /upRendering /FSCMYK32
                /upOutputFormat /Pcl
                /upYMoveCommand (customized format string)
        >>
        setpagedevice
} stopped {
        % An error occurred, it is the mitigation stopping us
        (Your version of Ghostscript is NOT vulnerable to CVE-2024-29510 :\)\n) print
} {
        % No error was thrown, the vulnerability is not patched
        (Your version of Ghostscript IS vulnerable to CVE-2024-29510 :\(\n) print
} ifelse

quit
EOF

fi

ghostscript -q -dBATCH -dNODISPLAY CVE-2024-29510_testkit.ps