Vulnerability in Artifex Afpl_ghostscript
CVE-2010-2055
Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs…
EPSS: 0.005 (39.2th percentile) — read the EPSS interpretation.
Affected products
- Artifex Afpl_ghostscript — versions 8.52, 8.11, 8.50
- Artifex Ghostscript_fonts — versions 8.11, 6.0
- Artifex Gpl_ghostscript — versions 8.60, 8.50, 8.64
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)
- secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
- secalert@redhat.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secalert@redhat.com (x_refsource_CONFIRM)