Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pxh5-rx4p-mm6h

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

EPSS

Процентиль: 20%
0.00064
Низкий

Связанные уязвимости

ubuntu
около 15 лет назад

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

redhat
около 15 лет назад

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

nvd
около 15 лет назад

Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, as demonstrated using gs_init.ps, a different vulnerability than CVE-2010-4820.

debian
около 15 лет назад

Ghostscript 8.71 and earlier reads initialization files from the curre ...

oracle-oval
больше 13 лет назад

ELSA-2012-0095: ghostscript security update (MODERATE)

EPSS

Процентиль: 20%
0.00064
Низкий