CVE-2010-4820
CVE-2010-4820
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
ghostscript Debian:12
- Affected ranges
- ECOSYSTEM: < 8.71~dfsg2-6.1
Update to 8.71~dfsg2-6.1
ghostscript Debian:13
- Affected ranges
- ECOSYSTEM: < 8.71~dfsg2-6.1
Update to 8.71~dfsg2-6.1
ghostscript Debian:14
- Affected ranges
- ECOSYSTEM: < 8.71~dfsg2-6.1
Update to 8.71~dfsg2-6.1
Original sources
- https://bugzilla.redhat.com/show_bug.cgi?id=599564
- https://bugzilla.redhat.com/show_bug.cgi?id=771853
- http://www.openwall.com/lists/oss-security/2012/01/04/7
- http://bugs.ghostscript.com/show_bug.cgi?id=691339
- http://rhn.redhat.com/errata/RHSA-2012-0096.html
- http://rhn.redhat.com/errata/RHSA-2012-0095.html
- http://www.securityfocus.com/archive/1/511433
- http://www.securityfocus.com/bid/51847
- https://nvd.nist.gov/vuln/detail/CVE-2010-4820