CVE-2010-4054
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of...
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
Exploit likelihood
What each source reports
NVD Score used
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
- Record
CVE-2010-4054- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
- Record
CVE-2010-4054- Updated
- 2026-11-02
EUVDEUVD-2010-4030No score
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
- Record
EUVD-2010-4030- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v2wp-vq4f-gx8cNo score
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of...
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
- Record
GHSA-v2wp-vq4f-gx8c- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
- Record
CVE-2010-4054- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-4054No score
The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.
- Record
DEBIAN-CVE-2010-4054- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ghostscriptDebian:12 | before 8.71~dfsg-1 | 8.71~dfsg-1 |
ghostscriptDebian:13 | before 8.71~dfsg-1 | 8.71~dfsg-1 |
ghostscriptDebian:14 | before 8.71~dfsg-1 | 8.71~dfsg-1 |
ghostscriptRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-gtkRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscriptRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscriptRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
Show 39 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ghostscript-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-develRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscript-gtkRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs | before 0:8.70-6.el5_7.6 | 0:8.70-6.el5_7.6 |
ghostscriptRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-docRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-gtkRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscriptRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-docRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-gtkRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscriptRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-docRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-gtkRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscriptRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-docRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscript-gtkRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:8.70-11.el6_2.6 | 0:8.70-11.el6_2.6 |
ghostscriptRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-gtkRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscriptRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-gtkRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscriptRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-gtkRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscriptRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
ghostscript-gtkRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:7.07-33.13.el4 | 0:7.07-33.13.el4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-4054 is a medium vulnerability (CVSS 4.3) in Artifex Afpl Ghostscript, published October 22, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.61%, the 85th percentile. Fixed in ghostscript 8.71~dfsg-1.
References
rhn.redhat.com/errata/RHSA-2012-0095.html
security.gentoo.org/glsa/glsa-201412-17.xml
kb.cert.org/vuls/id/538191
ghostscript.com/pipermail/gs-cvs/2010-January/010333.html
nvd.nist.gov/vuln/detail/CVE-2010-4054
Show 22 moreShow less
github.com/advisories/GHSA-v2wp-vq4f-gx8c
security-tracker.debian.org/tracker/CVE-2010-4054
access.redhat.com/errata/RHSA-2012:0095
bugzilla.redhat.com/show_bug.cgi?id=599564
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0095.json
cve.org/CVERecord?id=CVE-2009-3743