CVE-2010-4820

Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.4 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
VendorProductVersion
ghostscriptghostscript
8.62
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ghostscript
bullseye
9.53.3~dfsg-7+deb11u7
fixed
lenny
no-dsa
bullseye (security)
9.53.3~dfsg-7+deb11u8
fixed
bookworm
10.0.0~dfsg-11+deb12u4
fixed
bookworm (security)
10.0.0~dfsg-11+deb12u5
fixed
sid
10.04.0~dfsg-1
fixed
trixie
10.04.0~dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ghostscript
oneiric
not-affected
natty
not-affected
maverick
ignored
lucid
ignored
hardy
ignored
gs-afpl
oneiric
dne
natty
dne
maverick
dne
lucid
dne
hardy
dne
gs-esp
oneiric
dne
natty
dne
maverick
dne
lucid
dne
hardy
dne
gs-gpl
oneiric
dne
natty
dne
maverick
dne
lucid
dne
hardy
dne
Common Weakness Enumeration
References
http://bugs.ghostscript.com/show_bug.cgi?id=691339
http://rhn.redhat.com/errata/RHSA-2012-0095.html
http://rhn.redhat.com/errata/RHSA-2012-0096.html
http://www.openwall.com/lists/oss-security/2012/01/04/7
http://www.securityfocus.com/archive/1/511433
http://www.securityfocus.com/bid/51847
https://bugzilla.redhat.com/show_bug.cgi?id=599564
https://bugzilla.redhat.com/show_bug.cgi?id=771853
http://bugs.ghostscript.com/show_bug.cgi?id=691339
http://rhn.redhat.com/errata/RHSA-2012-0095.html
http://rhn.redhat.com/errata/RHSA-2012-0096.html
http://www.openwall.com/lists/oss-security/2012/01/04/7
http://www.securityfocus.com/archive/1/511433
http://www.securityfocus.com/bid/51847
https://bugzilla.redhat.com/show_bug.cgi?id=599564
https://bugzilla.redhat.com/show_bug.cgi?id=771853