automatic module_metadata_base.json update

Author: msjenkins-r7

db/modules_metadata_base.json

@@ -96767,6 +96767,58 @@
     "session_types": false,
     "needs_cleanup": null
   },
+  "exploit_multi/fileformat/ghostscript_format_string_cve_2024_29510": {
+    "name": "Ghostscript Command Execution via Format String",
+    "fullname": "exploit/multi/fileformat/ghostscript_format_string_cve_2024_29510",
+    "aliases": [
+
+    ],
+    "rank": 600,
+    "disclosure_date": "2024-03-14",
+    "type": "exploit",
+    "author": [
+      "Thomas Rinsma",
+      "Christophe De La fuente"
+    ],
+    "description": "This module exploits a format string vulnerability in Ghostscript\n          versions before 10.03.1 to achieve a SAFER sandbox bypass and execute\n          arbitrary commands. This vulnerability is reachable via libraries such as\n          ImageMagick.\n\n          This exploit only works against Ghostscript versions 10.03.0 and\n          10.01.2. Some offsets adjustement will probably be needed to make it\n          work with other versions.",
+    "references": [
+      "CVE-2024-29510",
+      "URL-https://bugs.ghostscript.com/show_bug.cgi?id=707662",
+      "URL-https://codeanlabs.com/blog/research/cve-2024-29510-ghostscript-format-string-exploitation/"
+    ],
+    "platform": "Linux,Unix,Windows",
+    "arch": "cmd, x86, x64",
+    "rport": null,
+    "autofilter_ports": [
+
+    ],
+    "autofilter_services": [
+
+    ],
+    "targets": [
+      "Linux Command"
+    ],
+    "mod_time": "2024-07-19 16:19:56 +0000",
+    "path": "/modules/exploits/multi/fileformat/ghostscript_format_string_cve_2024_29510.rb",
+    "is_install_path": true,
+    "ref_name": "multi/fileformat/ghostscript_format_string_cve_2024_29510",
+    "check": false,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "SideEffects": [
+        "artifacts-on-disk"
+      ],
+      "Reliability": [
+        "repeatable-session"
+      ]
+    },
+    "session_types": false,
+    "needs_cleanup": null
+  },
   "exploit_multi/fileformat/gitlens_local_config_exec": {
     "name": "GitLens Git Local Configuration Exec",
     "fullname": "exploit/multi/fileformat/gitlens_local_config_exec",