Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-4054

Fixed in a distro release EPSS 3%

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Published 2010-10-22 · CVE record · OSV

Products: artifex afpl_ghostscript, artifex ghostscript_fonts, artifex gpl_ghostscript

Distro releases

ReleasePackageFixed in
Debian 12ghostscript8.71~dfsg-1
Debian 13ghostscript8.71~dfsg-1
Debian 14ghostscript8.71~dfsg-1
Red Hat Enterprise Linux 4ghostscript0:7.07-33.13.el4
Red Hat Enterprise Linux 4ghostscript-debuginfo0:7.07-33.13.el4
Red Hat Enterprise Linux 4ghostscript-devel0:7.07-33.13.el4
Red Hat Enterprise Linux 4ghostscript-gtk0:7.07-33.13.el4
Red Hat Enterprise Linux 5ghostscript0:8.70-6.el5_7.6
Red Hat Enterprise Linux 5ghostscript-debuginfo0:8.70-6.el5_7.6
Red Hat Enterprise Linux 5ghostscript-devel0:8.70-6.el5_7.6
Red Hat Enterprise Linux 5ghostscript-gtk0:8.70-6.el5_7.6
Red Hat Enterprise Linux 6ghostscript0:8.70-11.el6_2.6
Red Hat Enterprise Linux 6ghostscript-debuginfo0:8.70-11.el6_2.6
Red Hat Enterprise Linux 6ghostscript-devel0:8.70-11.el6_2.6
Red Hat Enterprise Linux 6ghostscript-doc0:8.70-11.el6_2.6
Red Hat Enterprise Linux 6ghostscript-gtk0:8.70-11.el6_2.6