Vulnerability Name:

CVE-2010-1869 (CCN-58546)

Assigned:2010-05-11
Published:2010-05-11
Updated:2018-10-10
Summary:Stack-based buffer overflow in the parser function in GhostScript 8.70 and 8.64 allows context-dependent attackers to execute arbitrary code via a crafted PostScript file.
CVSS v3 Severity:7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
8.0 High (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:POC/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
6.8 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
5.8 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:POC/RL:U/RC:UR)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-119
Vulnerability Consequences:Gain Access
References:Source: CCN
Type: BugTraq Mailing List, Tue May 11 2010
Multiple memory corruption vulnerabilities in Ghostscript

Source: MITRE
Type: CNA
CVE-2010-1869

Source: SUSE
Type: UNKNOWN
SUSE-SR:2010:014

Source: CCN
Type: SA39753
GhostScript PostScript File Processing Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
39753

Source: SECUNIA
Type: UNKNOWN
40580

Source: CCN
Type: SECTRACK ID: 1024003
Ghostscript Stack Overflow in Parser Function Lets Remote Users Execute Arbitrary Code

Source: MISC
Type: UNKNOWN
http://www.checkpoint.com/defense/advisories/public/2010/cpai-10-May.html

Source: DEBIAN
Type: DSA-2080
ghostscript -- several vulnerabilities

Source: CCN
Type: Ghostscript Web site
Ghostscript

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2010:102

Source: CCN
Type: OSVDB ID: 64543
GhostScript PostScript File Long Identifier Overflow

Source: BUGTRAQ
Type: UNKNOWN
20100512 Multiple memory corruption vulnerabilities in Ghostscript

Source: BID
Type: UNKNOWN
40103

Source: CCN
Type: BID-40103
Ghostscript PostScript Identifier Remote Stack Buffer Overflow Vulnerability

Source: SECTRACK
Type: UNKNOWN
1024003

Source: UBUNTU
Type: UNKNOWN
USN-961-1

Source: VUPEN
Type: UNKNOWN
ADV-2010-1138

Source: VUPEN
Type: UNKNOWN
ADV-2010-1195

Source: XF
Type: UNKNOWN
ghostscript-parser-bo(58546)

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [07-18-2010]

Source: SUSE
Type: SUSE-SR:2010:015
SUSE Security Summary Report

Vulnerable Configuration:Configuration 1:
  • cpe:/a:artifex:gpl_ghostscript:8.64:*:*:*:*:*:*:*
  • OR cpe:/a:artifex:gpl_ghostscript:8.70:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:ghostscript:ghostscript:8.64:*:*:*:*:*:*:*
  • OR cpe:/a:ghostscript:ghostscript:8.70:*:*:*:*:*:*:*
  • AND
  • cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux_corporate_server:4.0:*:x86_64:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:x86-64:*:*:*:*:*
  • OR cpe:/o:mandrakesoft:mandrake_linux:2008.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandriva:linux:2009.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandriva:linux:2009.0:-:x86_64:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:5.0:*:*:*:*:*:*:*
  • OR cpe:/o:mandriva:linux:2009.1:*:*:*:*:*:*:*
  • OR cpe:/o:mandriva:linux:2009.1:*:*:*:x86_64:*:*:*
  • OR cpe:/o:mandriva:enterprise_server:5:*:*:*:*:*:*:*
  • OR cpe:/o:mandriva:enterprise_server:5:*:*:*:x86_64:*:*:*
  • OR cpe:/o:mandriva:linux:2010:*:*:*:x86_64:*:*:*
  • OR cpe:/o:mandriva:linux:2010:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:42311
    P
    		Security update for openssl-1_1 (Important)
    2022-07-07
    oval:org.opensuse.security:def:20101869
    V
    		CVE-2010-1869
    2022-05-20
    oval:org.opensuse.security:def:31372
    P
    		Security update for MozillaFirefox (Important) (in QA)
    2022-01-14
    oval:org.opensuse.security:def:31371
    P
    		Security update for java-1_8_0-ibm (Important) (in QA)
    2022-01-04
    oval:org.opensuse.security:def:26186
    P
    		Security update for libqt4 (Important)
    2021-12-22
    oval:org.opensuse.security:def:33058
    P
    		Security update for mozilla-nss (Important)
    2021-12-06
    oval:org.opensuse.security:def:26172
    P
    		Security update for webkit2gtk3 (Important)
    2021-11-23
    oval:org.opensuse.security:def:26163
    P
    		Security update for bind (Important)
    2021-11-11
    oval:org.opensuse.security:def:32210
    P
    		Security update for opensc (Important)
    2021-10-29
    oval:org.opensuse.security:def:32191
    P
    		Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP3) (Important)
    2021-09-23
    oval:org.opensuse.security:def:31686
    P
    		Security update for xen (Important)
    2021-09-23
    oval:org.opensuse.security:def:31681
    P
    		Security update for gtk-vnc (Moderate)
    2021-09-16
    oval:org.opensuse.security:def:31260
    P
    		Security update for aspell (Important)
    2021-08-25
    oval:org.opensuse.security:def:26109
    P
    		Security update for unrar (Moderate)
    2021-08-25
    oval:org.opensuse.security:def:42113
    P
    		Security update for libmspack (Moderate)
    2021-08-20
    oval:org.opensuse.security:def:32147
    P
    		Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)
    2021-07-21
    oval:org.opensuse.security:def:32125
    P
    		Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)
    2021-06-18
    oval:org.opensuse.security:def:36410
    P
    		ghostscript-devel-8.62-32.34.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36134
    P
    		ghostscript-fonts-other-8.62-32.34.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:42541
    P
    		ghostscript-fonts-other-8.62-32.34.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:31186
    P
    		Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)
    2021-06-04
    oval:org.opensuse.security:def:31628
    P
    		Security update for dhcp (Important)
    2021-06-01
    oval:org.opensuse.security:def:31175
    P
    		Security update for graphviz (Critical)
    2021-05-19
    oval:org.opensuse.security:def:31174
    P
    		Security update for djvulibre (Important)
    2021-05-19
    oval:org.opensuse.security:def:32086
    P
    		Security update for java-1_7_0-openjdk (Moderate)
    2021-04-29
    oval:org.opensuse.security:def:31612
    P
    		Security update for gdm (Important)
    2021-04-28
    oval:org.opensuse.security:def:26035
    P
    		Security update for apache-commons-io (Moderate)
    2021-04-26
    oval:org.opensuse.security:def:26033
    P
    		Security update for ImageMagick (Moderate)
    2021-04-20
    oval:org.opensuse.security:def:26025
    P
    		Security update for openexr (Moderate)
    2021-04-07
    oval:org.opensuse.security:def:33097
    P
    		Security update for glib2 (Important)
    2021-03-16
    oval:org.opensuse.security:def:32266
    P
    		Security update for python-cryptography (Important)
    2021-03-02
    oval:org.opensuse.security:def:31738
    P
    		Security update for grub2 (Important)
    2021-03-02
    oval:org.opensuse.security:def:26084
    P
    		Security update for postgresql, postgresql12, postgresql13 (Important)
    2021-01-26
    oval:org.opensuse.security:def:26031
    P
    		Security update for php74 (Moderate)
    2021-01-14
    oval:org.opensuse.security:def:26133
    P
    		Security update for java-1_8_0-ibm (Moderate)
    2021-01-05
    oval:org.opensuse.security:def:32829
    P
    		Security update for openssl (Important)
    2020-12-11
    oval:org.opensuse.security:def:25975
    P
    		Security update for openssl-1_0_0 (Important)
    2020-12-09
    oval:org.opensuse.security:def:25971
    P
    		Security update for fontforge (Moderate)
    2020-12-04
    oval:org.opensuse.security:def:35706
    P
    		ghostscript-fonts-other-8.62-32.28.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35904
    P
    		ghostscript-fonts-other-8.62-32.34.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:25880
    P
    		Security update for libvirt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32354
    P
    		Security update for squid3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25960
    P
    		Security update for gimp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25599
    P
    		Security update for apache2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32315
    P
    		Security update for rsync (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27408
    P
    		ghostscript-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25959
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25542
    P
    		Security update for java-1_8_0-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:27373
    P
    		avahi-compat-howl-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25461
    P
    		Security update for cpio (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31981
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:26735
    P
    		libMagickCore1-32bit on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25333
    P
    		Security update for apache-commons-httpclient (Important)
    2020-12-01
    oval:org.opensuse.security:def:31825
    P
    		Security update for bind (Important)
    2020-12-01
    oval:org.opensuse.security:def:26691
    P
    		enscript on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25269
    P
    		Security update for libpng12 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31541
    P
    		Security update for samba (Important)
    2020-12-01
    oval:org.opensuse.security:def:26677
    P
    		clamav on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25258
    P
    		Security update for postgresql10 (Low)
    2020-12-01
    oval:org.opensuse.security:def:31484
    P
    		Security update for python (Important)
    2020-12-01
    oval:org.opensuse.security:def:26638
    P
    		squid on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26706
    P
    		ghostscript-fonts-other on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25257
    P
    		Security update for apache2-mod_auth_openidc (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31392
    P
    		Security update for pam-modules (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26589
    P
    		libltdl7 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26671
    P
    		apache2-mod_php53 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26260
    P
    		Security update for Mesa (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25989
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25796
    P
    		Security update for util-linux (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32671
    P
    		ghostscript-fonts-other on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25739
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:25936
    P
    		Security update for libreoffice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32632
    P
    		apache2 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25658
    P
    		Security update for liblouis (Low)
    2020-12-01
    oval:org.opensuse.security:def:31994
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:25530
    P
    		Security update for virglrenderer (Important)
    2020-12-01
    oval:org.opensuse.security:def:32054
    P
    		Security update for kvm (Important)
    2020-12-01
    oval:org.opensuse.security:def:31950
    P
    		Security update for grub2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25466
    P
    		Security update for libxml2 (Low)
    2020-12-01
    oval:org.opensuse.security:def:31928
    P
    		Security update for giflib (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25455
    P
    		Security update for libjpeg-turbo (Important)
    2020-12-01
    oval:org.opensuse.security:def:31889
    P
    		Security update for evince (Important)
    2020-12-01
    oval:org.opensuse.security:def:26903
    P
    		ghostscript-fonts-other on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25454
    P
    		Security update for ucode-intel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31589
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31840
    P
    		Security update for bsdtar (Important)
    2020-12-01
    oval:org.opensuse.security:def:26868
    P
    		avahi on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31457
    P
    		Security update for postgresql91
    2020-12-01
    oval:org.opensuse.security:def:26536
    P
    		dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26230
    P
    		Security update for libreoffice (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31383
    P
    		Security update for openvpn (Important)
    2020-12-01
    oval:org.opensuse.security:def:26385
    P
    		Security update for go (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32868
    P
    		ghostscript-fonts-other on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25968
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25887
    P
    		Security update for ImageMagick (Important)
    2020-12-01
    oval:org.opensuse.security:def:25759
    P
    		Security update for icu (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25834
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:25695
    P
    		Security update for gcc9 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31967
    P
    		Security update for intel-SINIT (Important)
    2020-12-01
    oval:org.opensuse.security:def:25684
    P
    		Security update for postgresql10 (Important)
    2020-12-01
    oval:org.opensuse.security:def:31910
    P
    		Security update for fuse (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27132
    P
    		ghostscript-fonts-other on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25683
    P
    		Security update for ucode-intel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31818
    P
    		Security update for audiofile (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32037
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:27097
    P
    		compat-libldap-2_3-0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31784
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26459
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:26415
    P
    		Security update for python-Django (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31601
    P
    		Security update for tomcat6 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26301
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26401
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:31600
    P
    		Security update for tightvnc (Important)
    2020-12-01
    oval:org.opensuse.security:def:26244
    P
    		Security update for openconnect (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26362
    P
    		Security update for nginx (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26313
    P
    		Security update for python-requests (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32420
    P
    		Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32376
    P
    		Security update for tiff (Moderate)
    2020-12-01
    oval:org.mitre.oval:def:12360
    P
    		DSA-2080-1 ghostscript -- several
    2014-07-21
    oval:org.mitre.oval:def:12750
    P
    		USN-961-1 -- ghostscript vulnerabilities
    2014-06-30
    oval:org.debian:def:2080
    V
    		several vulnerabilities
    2010-08-01
    BACK
    artifex gpl ghostscript 8.64
    artifex gpl ghostscript 8.70
    ghostscript ghostscript 8.64
    ghostscript ghostscript 8.70
    mandrakesoft mandrake linux corporate server 4.0
    mandrakesoft mandrake linux corporate server 4.0
    mandrakesoft mandrake linux 2008.0
    mandrakesoft mandrake linux 2008.0
    mandriva linux 2009.0
    mandriva linux 2009.0 -
    debian debian linux 5.0
    mandriva linux 2009.1
    mandriva linux 2009.1
    mandriva enterprise server 5
    mandriva enterprise server 5
    mandriva linux 2010
    mandriva linux 2010