CVE-2010-4054

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-10-23 · updated 2026-06-16
Weakness: CWE-119

Description

The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043.

Affected products

Artifex Afpl Ghostscript: 6.0, 6.01, 6.50, 7.00, 7.03, 7.04 (+11)
Artifex Ghostscript Fonts: 6.0, 8.11
Artifex Gpl Ghostscript: 8.01, 8.15, 8.50, 8.51, 8.54, 8.56 (+8)

References

http://ghostscript.com/pipermail/gs-cvs/2010-January/010333.html
http://rhn.redhat.com/errata/RHSA-2012-0096.html
http://security.gentoo.org/glsa/glsa-201412-17.xml
http://www.kb.cert.org/vuls/id/538191
https://rhn.redhat.com/errata/RHSA-2012-0095.html
http://ghostscript.com/pipermail/gs-cvs/2010-January/010333.html
http://rhn.redhat.com/errata/RHSA-2012-0096.html
http://security.gentoo.org/glsa/glsa-201412-17.xml
http://www.kb.cert.org/vuls/id/538191
https://rhn.redhat.com/errata/RHSA-2012-0095.html

Get alerted when CVE-2010-4054 or the next vulnerability affects your stack