CVE-2000-1163

CVE-2000-1163 describes a local privilege escalation vulnerability in Ghostscript versions prior to 5.10-16. The vulnerability arises from Ghostscript's use of an empty LD_RUN_PATH environment variable, allowing it to search for libraries in the current directory. A local attacker could exploit this by placing a malicious library in a directory, leading to arbitrary command execution as another user when they execute Ghostscript from that location. This medium-severity vulnerability (CVSS 4.6) has a low attack complexity and requires local access, potentially leading to compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.