CVE-2010-2055
22.07.2010, 05:43
Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.Enginsight
| Vendor | Product | Version |
|---|---|---|
| artifex | afpl_ghostscript | 6.0 |
| artifex | afpl_ghostscript | 6.01 |
| artifex | afpl_ghostscript | 6.50 |
| artifex | afpl_ghostscript | 7.00 |
| artifex | afpl_ghostscript | 7.03 |
| artifex | afpl_ghostscript | 7.04 |
| artifex | afpl_ghostscript | 8.00 |
| artifex | afpl_ghostscript | 8.11 |
| artifex | afpl_ghostscript | 8.12 |
| artifex | afpl_ghostscript | 8.13 |
| artifex | afpl_ghostscript | 8.14 |
| artifex | afpl_ghostscript | 8.50 |
| artifex | afpl_ghostscript | 8.51 |
| artifex | afpl_ghostscript | 8.52 |
| artifex | afpl_ghostscript | 8.53 |
| artifex | afpl_ghostscript | 8.54 |
| artifex | ghostscript_fonts | 6.0 |
| artifex | ghostscript_fonts | 8.11 |
| artifex | gpl_ghostscript | 𝑥 ≤ 8.71 |
| artifex | gpl_ghostscript | 8.01 |
| artifex | gpl_ghostscript | 8.15 |
| artifex | gpl_ghostscript | 8.50 |
| artifex | gpl_ghostscript | 8.51 |
| artifex | gpl_ghostscript | 8.54 |
| artifex | gpl_ghostscript | 8.56 |
| artifex | gpl_ghostscript | 8.57 |
| artifex | gpl_ghostscript | 8.60 |
| artifex | gpl_ghostscript | 8.61 |
| artifex | gpl_ghostscript | 8.62 |
| artifex | gpl_ghostscript | 8.63 |
| artifex | gpl_ghostscript | 8.64 |
| artifex | gpl_ghostscript | 8.70 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ghostscript |
| ||||||||||||||
| gs-afpl |
| ||||||||||||||
| gs-esp |
| ||||||||||||||
| gs-gpl |
|
Common Weakness Enumeration
References