First published: Sat Oct 23 2010(Updated: )
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Ghostscript | =6.0 | |
Ghostscript | =6.01 | |
Ghostscript | =6.50 | |
Ghostscript | =7.00 | |
Ghostscript | =7.03 | |
Ghostscript | =7.04 | |
Ghostscript | =8.00 | |
Ghostscript | =8.11 | |
Ghostscript | =8.12 | |
Ghostscript | =8.13 | |
Ghostscript | =8.14 | |
Ghostscript | =8.50 | |
Ghostscript | =8.51 | |
Ghostscript | =8.52 | |
Ghostscript | =8.53 | |
Ghostscript | =8.54 | |
Ghostscript | =9.0 | |
artifex Ghostscript fonts | =6.0 | |
artifex Ghostscript fonts | =8.11 | |
Ghostscript | =8.01 | |
Ghostscript | =8.15 | |
Ghostscript | =8.50 | |
Ghostscript | =8.51 | |
Ghostscript | =8.54 | |
Ghostscript | =8.56 | |
Ghostscript | =8.57 | |
Ghostscript | =8.60 | |
Ghostscript | =8.61 | |
Ghostscript | =8.62 | |
Ghostscript | =8.63 | |
Ghostscript | =8.64 | |
Ghostscript | =8.70 | |
Ghostscript | =8.71 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-4054 is rated as a denial of service vulnerability, which can cause application crashes due to incorrect pointer dereference.
Fixing CVE-2010-4054 involves upgrading to a patched version of Ghostscript that addresses this vulnerability.
CVE-2010-4054 affects multiple versions of Ghostscript, including 6.0 to 9.0.
CVE-2010-4054 enables remote attackers to exploit a crafted font data to cause a denial of service.
Yes, CVE-2010-4054 can be exploited remotely through crafted input that can trigger the denial of service condition.