CVE-2023-36664

This repository contains a Python script that exploits CVE-2023-36664, a command injection vulnerability in Ghostscript prior to version 10.01.2. The exploit generates or injects malicious payloads into PS or EPS files, which execute arbitrary commands when processed by vulnerable Ghostscript versions.

This PowerShell script scans for GhostScript files vulnerable to CVE-2023-36664 by checking file versions across local drives. It self-elevates to administrator privileges if required and lists affected files.

This repository contains a Python script that exploits CVE-2023-36664, a command injection vulnerability in Ghostscript prior to version 10.01.2. The exploit generates or injects malicious payloads into PS or EPS files, which execute arbitrary commands when processed by vulnerable Ghostscript versions.

This PoC exploits CVE-2023-36664 in Ghostscript by injecting a malicious payload into an EPS file, which triggers remote code execution when opened in LibreOffice Draw. The payload leverages Ghostscript's pipe device to execute arbitrary commands.