CVE-2010-4820
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary...
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
- Record
CVE-2010-4820- CVSS 2.0
- 4.4 Medium
AV:L/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
- Record
CVE-2010-4820- Updated
- 2026-11-02
EUVDEUVD-2010-4785 No score
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
- Record
EUVD-2010-4785- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-37q2-9vp4-q6f4 No score
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary...
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
- Record
GHSA-37q2-9vp4-q6f4- Weakness
- CWE-94
- Updated
- 2026-11-02
OSV No score
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
- Record
CVE-2010-4820- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-4820 No score
Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript code via a Trojan horse Postscript library file in Encoding/ under the current working directory, a different vulnerability than CVE-2010-2055.
- Record
DEBIAN-CVE-2010-4820- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptDebian:12 |
before 8.71~dfsg2-6.1 | 8.71~dfsg2-6.1 |
ghostscriptDebian:13 |
before 8.71~dfsg2-6.1 | 8.71~dfsg2-6.1 |
ghostscriptDebian:14 |
before 8.71~dfsg2-6.1 | 8.71~dfsg2-6.1 |
ghostscriptRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-gtkRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscriptRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscriptRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
Show 39 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscript-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-develRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-gtkRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscriptRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-docRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-gtkRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscriptRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-docRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-gtkRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscriptRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-docRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-gtkRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscriptRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-docRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-gtkRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs |
before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscriptRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-gtkRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscriptRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-gtkRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscriptRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-gtkRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscriptRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-gtkRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4820 is a medium vulnerability (CVSS 4.4) in Ghostscript, published October 27, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in ghostscript 8.71~dfsg2-6.1.
References
bugzilla.redhat.com/show_bug.cgi?id=599564
openwall.com/lists/oss-security/2012/01/04/7
bugs.ghostscript.com/show_bug.cgi?id=691339
rhn.redhat.com/errata/RHSA-2012-0096.html
Show 23 moreShow less
securityfocus.com/archive/1/511433
nvd.nist.gov/vuln/detail/CVE-2010-4820
github.com/advisories/GHSA-37q2-9vp4-q6f4
security-tracker.debian.org/tracker/CVE-2010-4820
access.redhat.com/errata/RHSA-2012:0095
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0095.json
cve.org/CVERecord?id=CVE-2009-3743