Every CVE Search/ Get API key

CVE-2010-4054

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of...

4.3 MediumFix available

CVE-2010-4054 is a medium vulnerability (CVSS 4.3) in Artifex Afpl Ghostscript, published October 22, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.61%, the 85th percentile. Fixed in ghostscript 8.71~dfsg-1.

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Exploit likelihood

2.61%Up 1.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Record
CVE-2010-4054
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Record
CVE-2010-4054
Updated
2026-11-02
EUVDEUVD-2010-4030 No score

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Record
EUVD-2010-4030
Updated
2026-11-03
GitHub AdvisoriesGHSA-v2wp-vq4f-gx8c No score

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of...

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Record
GHSA-v2wp-vq4f-gx8c
Weakness
CWE-119
Updated
2026-11-02
OSV No score

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Record
CVE-2010-4054
Updated
2026-11-02
OSVDEBIAN-CVE-2010-4054 No score

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Record
DEBIAN-CVE-2010-4054
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
ghostscript
Debian:12
 before 8.71~dfsg-1
8.71~dfsg-1
ghostscript
Debian:13
 before 8.71~dfsg-1
8.71~dfsg-1
ghostscript
Debian:14
 before 8.71~dfsg-1
8.71~dfsg-1
ghostscript
Red Hat:enterprise_linux:5::client
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
ghostscript-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
ghostscript-gtk
Red Hat:enterprise_linux:5::client
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
ghostscript
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
ghostscript-debuginfo
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
ghostscript-devel
Red Hat:enterprise_linux:5::client_workstation
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
ghostscript
Red Hat:enterprise_linux:5::server
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
Show 39 moreShow less
Affected packages
PackageAffectedFixed
ghostscript-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
ghostscript-devel
Red Hat:enterprise_linux:5::server
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
ghostscript-gtk
Red Hat:enterprise_linux:5::server
 before 0:8.70-6.el5_7.6
0:8.70-6.el5_7.6
ghostscript
Red Hat:enterprise_linux:6::client
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-devel
Red Hat:enterprise_linux:6::client
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-doc
Red Hat:enterprise_linux:6::client
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-gtk
Red Hat:enterprise_linux:6::client
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript
Red Hat:enterprise_linux:6::computenode
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-devel
Red Hat:enterprise_linux:6::computenode
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-doc
Red Hat:enterprise_linux:6::computenode
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-gtk
Red Hat:enterprise_linux:6::computenode
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript
Red Hat:enterprise_linux:6::server
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-devel
Red Hat:enterprise_linux:6::server
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-doc
Red Hat:enterprise_linux:6::server
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-gtk
Red Hat:enterprise_linux:6::server
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript
Red Hat:enterprise_linux:6::workstation
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-devel
Red Hat:enterprise_linux:6::workstation
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-doc
Red Hat:enterprise_linux:6::workstation
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript-gtk
Red Hat:enterprise_linux:6::workstation
 before 0:8.70-11.el6_2.6
0:8.70-11.el6_2.6
ghostscript
Red Hat:enterprise_linux:4::as
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-devel
Red Hat:enterprise_linux:4::as
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-gtk
Red Hat:enterprise_linux:4::as
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript
Red Hat:enterprise_linux:4::desktop
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-devel
Red Hat:enterprise_linux:4::desktop
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-gtk
Red Hat:enterprise_linux:4::desktop
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript
Red Hat:enterprise_linux:4::es
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-devel
Red Hat:enterprise_linux:4::es
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-gtk
Red Hat:enterprise_linux:4::es
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript
Red Hat:enterprise_linux:4::ws
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-devel
Red Hat:enterprise_linux:4::ws
 before 0:7.07-33.13.el4
0:7.07-33.13.el4
ghostscript-gtk
Red Hat:enterprise_linux:4::ws
 before 0:7.07-33.13.el4
0:7.07-33.13.el4

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 22 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open