PT-2010-3674 · Artifex+2 · Ghostscript+2

Published 2010-07-22 · Updated 2015-01-09 · CVE-2010-2055

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ghostscript versions 8.71 and earlier

Description The issue allows local users to execute arbitrary PostScript commands via a Trojan horse file due to improper support for the -P- option to the gs program. This can be demonstrated using gs init.ps.

Recommendations For Ghostscript versions 8.71 and earlier, consider updating to a version that fixes this issue, as the current version allows for the execution of arbitrary PostScript commands. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-17

Related Identifiers

CESA-2012_0095

CVE-2010-2055

RHSA-2012:0095

RHSA-2012_0095

Affected Products

Centos

Ghostscript

Red Hat

References · 39

• 🔥 http://securityfocus.com/archive/1/511474 · Exploit
• 🔥 http://bugs.ghostscript.com/show_bug.cgi?id=691339 · Exploit
• 🔥 http://securityfocus.com/archive/1/511472 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4054 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2010-2055 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201412-17.xml · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043948.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-July/043913.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2012-0095.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3743 · Security Note
• http://secunia.com/advisories/40452 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=599564 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-2055 · Security Note
• http://secunia.com/advisories/40532 · Vendor Advisory
• http://vupen.com/english/advisories/2010/1757 · Vendor Advisory