NVD

Id
16055  
Name
CVE-2010-4820  
Description
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-10-26  
Modified Date
2014-11-01  
Seq
2010-4820  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90768 16055 CVE-2010-4820 http://bugs.ghostscript.com/show_bug.cgi?id=691339  View
90769 16055 CVE-2010-4820 RHSA-2012:0095  View
90770 16055 CVE-2010-4820 RHSA-2012:0096  View
90771 16055 CVE-2010-4820 [oss-security] 20120104 Re: CVE request: ghostscript: system initialization file uncontrolled search path element  View
90772 16055 CVE-2010-4820 20100522 Ghostscript 8.64 executes random code at startup  View
90773 16055 CVE-2010-4820 51847  View
90774 16055 CVE-2010-4820 https://bugzilla.redhat.com/show_bug.cgi?id=599564  View
90775 16055 CVE-2010-4820 https://bugzilla.redhat.com/show_bug.cgi?id=771853  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39893 JVNDB-2010-005678 Ghostscript における任意の PostScript のコードを実行される脆弱性 Ghostscript には、検索パスに関する処理に不備があるため、任意の PostScript のコードを実行される脆弱性が存在します。 CVE-2010-4820 47400 CVE-2010-4820 16055 3.7 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005678.html 2010-05-26 2014-10-29 View