CVE-2010-2055

HIGH 7.2CVE-2010-2055 · Published 22/07/2010 · updated 16/06/2026

In short

CVE-2010-2055 is a HIGH (CVSS 7.2) vulnerability affecting afpl ghostscript (artifex), ghostscript fonts (artifex), gpl ghostscript (artifex).
Chance of exploitation in the next 30 days (EPSS): 0.51%, higher than 43.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
afpl ghostscript artifex	`= 6.0= 6.01= 6.50= 7.00= 7.03= 7.04= 8.00= 8.11= 8.12= 8.13= 8.14= 8.50= 8.51= 8.52= 8.53= 8.54`	No fix yet
ghostscript fonts artifex	`= 6.0= 8.11`	No fix yet
gpl ghostscript artifex	`= 8.01= 8.15= 8.50= 8.51= 8.54= 8.56= 8.57= 8.60= 8.61= 8.62= 8.63= 8.64= 8.70≤ 8.71`	No fix yet

Description

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

References

More vulnerabilities in afpl ghostscript

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free