CVE-2010-1869 describes a critical stack-based buffer overflow vulnerability in GhostScript versions 8.70 and 8.64, specifically within its parser function. This flaw allows remote, unauthenticated attackers to execute arbitrary code by enticing a user to open a specially crafted PostScript file. With a CVSS score of 9.3, this vulnerability is highly severe, indicating a complete compromise of confidentiality, integrity, and availability with moderate attack complexity. While not currently on CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.64CPE matchmatch criteria | cpe:2.3:a:artifex:gpl_ghostscript:8.64:*:*:*:*:*:*:* | ||
8.70CPE matchmatch criteria | cpe:2.3:a:artifex:gpl_ghostscript:8.70:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.