CVE:CVE-2010-2055
CNNVD:CNNVD-201007-235
Ghostscript是用于显示PostScript文件或向非PostScript打印机打印这些文件的程序。
Ghostscript在启动时会执行所有匹配./Encoding/*的文件但没有验证敏感文件的所有权，这可能导致执行任意PostScript代码；此外即使设置了-P-选项，Ghostscript也会从当前目录读取gs_init.ps。
solution:Upgrade artifex afpl_ghostscript to a higher version than 6.0,6.01,6.50,7.00,7.03,7.04,8.00,8.11,8.12,8.13,8.14,8.50,8.51,8.52,8.53,8.54,and avoid the version 6.0,6.01,6.50,7.00,7.03,7.04,8.00,8.11,8.12,8.13,8.14,8.50,8.51,8.52,8.53,8.54; Upgrade artifex ghostscript_fonts to a higher version than 6.0,8.11,and avoid the version 6.0,8.11; Upgrade artifex gpl_ghostscript to a higher version than 8.71,8.01,8.15,8.50,8.51,8.54,8.56,8.57,8.60,8.61,8.62,8.63,8.64,8.70,and avoid the version (,8.71],8.01,8.15,8.50,8.51,8.54,8.56,8.57,8.60,8.61,8.62,8.63,8.64,8.70