CVEvulnerability
CVE-2010-2055
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-07-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-17
Description
Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.
Affected configurations
• artifex afpl ghostscript 6.0
• artifex afpl ghostscript 6.01
• artifex afpl ghostscript 6.50
• artifex afpl ghostscript 7.00
• artifex afpl ghostscript 7.03
• artifex afpl ghostscript 7.04
• artifex afpl ghostscript 8.00
• artifex afpl ghostscript 8.11
• artifex afpl ghostscript 8.12
• artifex afpl ghostscript 8.13
• artifex afpl ghostscript 8.14
• artifex afpl ghostscript 8.50
• artifex afpl ghostscript 8.51
• artifex afpl ghostscript 8.52
• artifex afpl ghostscript 8.53
• artifex afpl ghostscript 8.54
• artifex ghostscript fonts 6.0
• artifex ghostscript fonts 8.11
• artifex gpl ghostscript (<= 8.71)
• artifex gpl ghostscript 8.01
• artifex gpl ghostscript 8.15
• artifex gpl ghostscript 8.50
• artifex gpl ghostscript 8.51
• artifex gpl ghostscript 8.54
• artifex gpl ghostscript 8.56
• artifex gpl ghostscript 8.57
• artifex gpl ghostscript 8.60
• artifex gpl ghostscript 8.61
• artifex gpl ghostscript 8.62
• artifex gpl ghostscript 8.63
• artifex gpl ghostscript 8.64
• artifex gpl ghostscript 8.70
Related
Weakness · not in database (1)
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183 bugs.debian.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316 bugs.debian.org
- http://bugs.ghostscript.com/show_bug.cgi?id=691339 Exploit
- http://bugs.ghostscript.com/show_bug.cgi?id=691350 bugs.ghostscript.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043913.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043948.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html lists.opensuse.org
- http://savannah.gnu.org/forum/forum.php?forum_id=6368 savannah.gnu.org
- http://secunia.com/advisories/40452 Vendor Advisory
- http://secunia.com/advisories/40475 Vendor Advisory
- http://secunia.com/advisories/40532 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-201412-17.xml security.gentoo.org
- http://www.osvdb.org/66247 www.osvdb.org
- http://www.securityfocus.com/archive/1/511433 www.securityfocus.com
- http://www.securityfocus.com/archive/1/511472 Exploit
- http://www.securityfocus.com/archive/1/511474 Exploit
- http://www.securityfocus.com/archive/1/511476 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1757 Vendor Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=608071 bugzilla.novell.com
- https://bugzilla.redhat.com/show_bug.cgi?id=599564 Patch
- https://rhn.redhat.com/errata/RHSA-2012-0095.html rhn.redhat.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183 bugs.debian.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316 bugs.debian.org
- http://bugs.ghostscript.com/show_bug.cgi?id=691339 Exploit
- http://bugs.ghostscript.com/show_bug.cgi?id=691350 bugs.ghostscript.com
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043913.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043948.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html lists.opensuse.org
- http://savannah.gnu.org/forum/forum.php?forum_id=6368 savannah.gnu.org
- http://secunia.com/advisories/40452 Vendor Advisory
- http://secunia.com/advisories/40475 Vendor Advisory
- http://secunia.com/advisories/40532 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-201412-17.xml security.gentoo.org
- http://www.osvdb.org/66247 www.osvdb.org
- http://www.securityfocus.com/archive/1/511433 www.securityfocus.com
- http://www.securityfocus.com/archive/1/511472 Exploit
- http://www.securityfocus.com/archive/1/511474 Exploit
- http://www.securityfocus.com/archive/1/511476 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1757 Vendor Advisory
- https://bugzilla.novell.com/show_bug.cgi?id=608071 bugzilla.novell.com
- https://bugzilla.redhat.com/show_bug.cgi?id=599564 Patch
- https://rhn.redhat.com/errata/RHSA-2012-0095.html rhn.redhat.com