CVE-2010-4820: Untrusted search path vulnerability in Ghostscript 8.62 allows local users to execute arbitrary PostScript...

Security readout for executives and security teams

Ghostscript could load a PostScript library file from the current working directory before trusted locations. A local user who can place a malicious file in that directory could cause code execution when Ghostscript starts. The source bundle does not cite internet-scale or active exploitation. Exposure is most likely on legacy systems or applications that invoke Ghostscript while operating inside directories writable by local users or uploaded-content workflows. Treat as a legacy exposure cleanup item unless affected Ghostscript is used in multi-user or upload-processing environments. Prioritize those environments because the impact is code execution under the Ghostscript process context. Mitigation focus: Identify systems still running Ghostscript 8.62 or vendor packages tied to the advisories.; Apply Ghostscript updates from relevant vendor guidance after confirming package applicability.; Avoid running Ghostscript from directories writable by untrusted users..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.