CVE-2010-2055

CVE-2010-2055 describes a local arbitrary code execution vulnerability in Ghostscript versions 8.71 and earlier, impacting artifex afpl_ghostscript, ghostscript_fonts, and gpl_ghostscript. This flaw arises from Ghostscript's practice of reading initialization files from the current working directory, allowing a local attacker to execute arbitrary PostScript commands via a malicious Trojan horse file. With a CVSS score of 7.2, this vulnerability is considered highly severe due to its low attack complexity and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.