CVE-2010-2055: High severity ghostscript vulnerability
Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gsinit.ps, a different vulnerability than CVE-2010-4820.
Other sources
Security flaws were found in the way gs handled its initialization: 1, library search path include '.' (current working directory) by default, causing ghostscript to search '.' for initialization and library postscript files 2, explicit use of "-P-" command line option, did not prevent ghostscript from executing PostScript commands, contained within "gsinit.ps" file.
A local attacker could use this flaw to execute arbitrary PostScript commands, if the victim was tricked into opening a PostScript file in the directory writeable by the attacker
References: [1] http://bugs.ghostscript.com/showbug.cgi?id=691339 [2] http://bugs.ghostscript.com/showbug.cgi?id=691350 [3] http://www.securityfocus.com/archive/1/511433 [4] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316 [5] https://bugzilla.novell.com/showbug.cgi?id=608071 [6] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583183
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2055?
CVE-2010-2055 has a medium severity rating as it allows local users to execute arbitrary PostScript commands.
How do I fix CVE-2010-2055?
To fix CVE-2010-2055, update Ghostscript to versions later than 8.71 or apply relevant security patches.
Which versions of Ghostscript are affected by CVE-2010-2055?
Ghostscript versions 8.71 and earlier, including versions from 6.0 up to 8.71, are affected by CVE-2010-2055.
What kind of attack is possible with CVE-2010-2055?
CVE-2010-2055 allows attackers to execute arbitrary PostScript commands through malicious initialization files.
Who is responsible for the Ghostscript software affected by CVE-2010-2055?
Ghostscript is developed by Artifex Software, Inc., which is responsible for maintaining the software and its security updates.