CVE-2010-1628: artifex gpl_ghostscript
Vulnerability summary
CVE-2010-1628 is a high (CVSS 9.3) vulnerability in artifex gpl_ghostscript. EPSS estimates a 4.04% chance of exploitation in the next 30 days, higher than 90.5% of scored vulnerabilities. 5 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 19-05-2010PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.04%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.04% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
5 foundExploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Exploit Reference (openwall.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Artifex1 product
- gpl_ghostscript8.64 | 8.70
Debian1 product
- ghostscript< 8.71~dfsg2-4
2 vendors · 2 products
References
15 links- bugs.ghostscript.com/show_bug.cgi?id=691295X Refsource MISC
