NVD

Id
13546  
Name
CVE-2010-2055  
Description
Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-07-22  
Modified Date
2015-01-09  
Seq
2010-2055  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74732 13546 CVE-2010-2055 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183  View
74733 13546 CVE-2010-2055 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316  View
74734 13546 CVE-2010-2055 http://bugs.ghostscript.com/show_bug.cgi?id=691339  View
74735 13546 CVE-2010-2055 http://bugs.ghostscript.com/show_bug.cgi?id=691350  View
74736 13546 CVE-2010-2055 FEDORA-2010-10660  View
74737 13546 CVE-2010-2055 FEDORA-2010-10642  View
74738 13546 CVE-2010-2055 SUSE-SR:2010:014  View
74739 13546 CVE-2010-2055 http://savannah.gnu.org/forum/forum.php?forum_id=6368  View
74740 13546 CVE-2010-2055 GLSA-201412-17  View
74741 13546 CVE-2010-2055 20100522 Ghostscript 8.64 executes random code at startup  View
74742 13546 CVE-2010-2055 20100526 Re: Ghostscript 8.64 executes random code at startup  View
74743 13546 CVE-2010-2055 20100526 Re: Ghostscript 8.64 executes random code at startup  View
74744 13546 CVE-2010-2055 20100526 Re: Ghostscript 8.64 executes random code at startup  View
74745 13546 CVE-2010-2055 ADV-2010-1757  View
74746 13546 CVE-2010-2055 https://bugzilla.novell.com/show_bug.cgi?id=608071  View
74747 13546 CVE-2010-2055 https://bugzilla.redhat.com/show_bug.cgi?id=599564  View
74748 13546 CVE-2010-2055 RHSA-2012:0095  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37827 JVNDB-2010-003612 Ghostscript における任意の PostScript コマンドを実行される脆弱性 Ghostscript は、カレントワーキングディレクトリから初期化ファイルを読み込むため、任意の PostScript コマンドを実行される脆弱性が存在します。 CVE-2010-2055 44635 CVE-2010-2055 13546 7.2 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003612.html 2010-07-22 2012-04-20 View