CVE-2010-1628
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute...
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
Exploit likelihood
What each source reports
NVD Score used
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
- Record
CVE-2010-1628- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
- Record
CVE-2010-1628- Updated
- 2026-11-02
EUVDEUVD-2010-1651 No score
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
- Record
EUVD-2010-1651- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-67rg-j83g-ppg2 No score
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute...
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
- Record
GHSA-67rg-j83g-ppg2- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
- Record
CVE-2010-1628- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-1628 No score
Ghostscript 8.64, 8.70, and possibly other versions allows context-dependent attackers to execute arbitrary code via a PostScript file containing unlimited recursive procedure invocations, which trigger memory corruption in the stack of the interpreter.
- Record
DEBIAN-CVE-2010-1628- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptDebian:12 |
before 8.71~dfsg2-4 | 8.71~dfsg2-4 |
ghostscriptDebian:13 |
before 8.71~dfsg2-4 | 8.71~dfsg2-4 |
ghostscriptDebian:14 |
before 8.71~dfsg2-4 | 8.71~dfsg2-4 |
ghostscriptDebian:5.0 From an advisory covering 2 CVEs |
before 8.62.dfsg.1-3.2lenny5, plus listed versions 8.62.dfsg.1-3.2lenny08.62.dfsg.1-3.2lenny18.62.dfsg.1-3.2lenny28.62.dfsg.1-3.2lenny4 |
8.62.dfsg.1-3.2lenny5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1628 is a high vulnerability (CVSS 9.3) in Artifex Gpl Ghostscript, published May 19, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.04%, the 90th percentile. Fixed in ghostscript 8.71~dfsg2-4.
References
secunia.com/advisories/39753
seclists.org/fulldisclosure/2010/May/134
security.gentoo.org/glsa/glsa-201412-17.xml
securityfocus.com/bid/40107
mandriva.com/security/advisories?name=MDVSA-2010:134
openwall.com/lists/oss-security/2010/05/18/7
Show 11 moreShow less
vupen.com/english/advisories/2010/1138
ubuntu.com/usn/USN-961-1
bugs.ghostscript.com/show_bug.cgi?id=691295
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
bugs.launchpad.net/ubuntu/+source/ghostscript/+bug/546009
nvd.nist.gov/vuln/detail/CVE-2010-1628
github.com/advisories/GHSA-67rg-j83g-ppg2
security-tracker.debian.org/tracker/CVE-2010-1628