CVE

Id
47404  
CVE No.
CVE-2010-4820  
Status
Candidate  
Description
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.  
Phase
Assigned (20110819)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
517548 47404 CVE-2010-4820 BUGTRAQ:20100522 Ghostscript 8.64 executes random code at startup  View
517549 47404 CVE-2010-4820 URL:http://www.securityfocus.com/archive/1/511433  View
517550 47404 CVE-2010-4820 MLIST:[oss-security] 20120104 Re: CVE request: ghostscript: system initialization file uncontrolled search path element  View
517551 47404 CVE-2010-4820 URL:http://www.openwall.com/lists/oss-security/2012/01/04/7  View
517552 47404 CVE-2010-4820 MISC:http://bugs.ghostscript.com/show_bug.cgi?id=691339  View
517553 47404 CVE-2010-4820 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=599564  View
517554 47404 CVE-2010-4820 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=771853  View
517555 47404 CVE-2010-4820 REDHAT:RHSA-2012:0095  View
517556 47404 CVE-2010-4820 URL:http://rhn.redhat.com/errata/RHSA-2012-0095.html  View
517557 47404 CVE-2010-4820 REDHAT:RHSA-2012:0096  View
517558 47404 CVE-2010-4820 URL:http://rhn.redhat.com/errata/RHSA-2012-0096.html  View
517559 47404 CVE-2010-4820 BID:51847  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38519 JVNDB-2010-004304 SilverStripe の core/model/Translatable.php における SQL インジェクションの脆弱性 SilverStripe の core/model/Translatable.php の augmentSQL メソッドには、Translatable エクステンションが有効な場合、SQL インジェクションの脆弱性が存在します。 CVE-2010-4824 47404 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004304.html  View