CVE-2010-2055: artifex afpl_ghostscript DEPRECATED: Code

Vulnerability summary

CVE-2010-2055 is a high (CVSS 7.2) DEPRECATED: Code vulnerability in artifex afpl_ghostscript. EPSS estimates a 0.51% chance of exploitation in the next 30 days, higher than 41.8% of scored vulnerabilities. 3 public exploits are recorded.

Timeline

1. 22-07-2010
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

• CWE-17DEPRECATED: CodeThis entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.