CVE-2010-4820 Code injection in n/a

Medium 4.4 Published 27 Oct 2014 Updated 7 Aug 2024

Local attackers can execute arbitrary PostScript code by placing a malicious library file in the current working directory, affecting Ghostscript users.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2010-4820?

CVE-2010-4820 is a medium-severity code injection vulnerability in n/a, published on 27 Oct 2014. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.

Weakness: CWE-94

Which versions are affected by CVE-2010-4820?

It affects 1 product.

Products include Ghostscript Ghostscript.

How do I fix CVE-2010-4820?

Upgrade to a fixed version.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2010-4820 being exploited?

There is no known exploitation of CVE-2010-4820 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2010-4820, GHSA-37q2-9vp4-q6f4.