| Package | Affected versions | Patched versions |
|---|---|---|
| afpl ghostscript | = 6.0= 6.01= 6.50= 7.00= 7.03= 7.04= 8.00= 8.11= 8.12= 8.13= 8.14= 8.50= 8.51= 8.52= 8.53= 8.54 | |
| ghostscript fonts | = 6.0= 8.11 | |
| gpl ghostscript | = 8.01= 8.15= 8.50= 8.51= 8.54= 8.56= 8.57= 8.60= 8.61= 8.62= 8.63= 8.64= 8.70≤ 8.71 |
Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free