CVE Feed

    Dashboard / CVE / CVE-2010-2055

    CVE-2010-2055

    Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

    Published:May 26, 2010
    Last Modified:Apr 11, 2025
    EPS:Jul 22, 2010
    EPSS Score:0.00064
    CVSS Score:7.2

    Affected Products

    Vendor
    Artifex
    Product
    Afpl Ghostscript
    Vendor
    Artifex
    Product
    Ghostscript Fonts
    Vendor
    Artifex
    Product
    Gpl Ghostscript
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    http://bugs.ghostscript.com/show_bug.cgi?id=691339http://www.securityfocus.com/archive/1/511472http://www.securityfocus.com/archive/1/511474http://bugs.ghostscript.com/show_bug.cgi?id=691339http://www.securityfocus.com/archive/1/511472http://www.securityfocus.com/archive/1/511474

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-6196 (CVSS 7.8) — Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript …
    CVE-2015-3228 (CVSS 6.8) — Integer overflow in the gs_heap_alloc_bytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows…
    CVE-2013-5653 (CVSS 5.5) — The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote…
    CVE-2009-3743 (CVSS 9.3) — Off-by-one error in the Ins_MINDEX function in the TrueType bytecode interpreter in Ghostscript before 8.71 al…
    CVE-2010-4054 (CVSS 4.3) — The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect…
    CVE-2009-4897 (CVSS 9.3) — Buffer overflow in gs/psi/iscan.c in Ghostscript 8.64 and earlier allows remote attackers to execute arbitrary…

    References

    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316
    http://bugs.ghostscript.com/show_bug.cgi?id=691339
    http://bugs.ghostscript.com/show_bug.cgi?id=691350
    http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043913.html
    http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043948.html
    http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
    http://savannah.gnu.org/forum/forum.php?forum_id=6368
    http://secunia.com/advisories/40452
    http://secunia.com/advisories/40475
    http://secunia.com/advisories/40532
    http://security.gentoo.org/glsa/glsa-201412-17.xml
    http://www.osvdb.org/66247
    http://www.securityfocus.com/archive/1/511433
    http://www.securityfocus.com/archive/1/511472
    http://www.securityfocus.com/archive/1/511474
    http://www.securityfocus.com/archive/1/511476
    http://www.vupen.com/english/advisories/2010/1757
    https://bugzilla.novell.com/show_bug.cgi?id=608071
    https://bugzilla.redhat.com/show_bug.cgi?id=599564
    https://rhn.redhat.com/errata/RHSA-2012-0095.html
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316
    http://bugs.ghostscript.com/show_bug.cgi?id=691339
    http://bugs.ghostscript.com/show_bug.cgi?id=691350
    http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043913.html
    http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043948.html
    http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
    http://savannah.gnu.org/forum/forum.php?forum_id=6368
    http://secunia.com/advisories/40452
    http://secunia.com/advisories/40475
    http://secunia.com/advisories/40532
    http://security.gentoo.org/glsa/glsa-201412-17.xml
    http://www.osvdb.org/66247
    http://www.securityfocus.com/archive/1/511433
    http://www.securityfocus.com/archive/1/511472
    http://www.securityfocus.com/archive/1/511474
    http://www.securityfocus.com/archive/1/511476
    http://www.vupen.com/english/advisories/2010/1757
    https://bugzilla.novell.com/show_bug.cgi?id=608071
    https://bugzilla.redhat.com/show_bug.cgi?id=599564
    https://rhn.redhat.com/errata/RHSA-2012-0095.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High