VULNERABILITY INTELLIGENCE

CVE-2010-2055

CVSS score7.2 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2010-07-22
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

Primary references