medium4.6Public exploit code

CVE-2002-0838

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

GV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (2)2002-09-26 · local · linux · Verified
GV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (1)2002-09-26 · local · linux · Verified

Impact

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Affected products

Vendor	Product	Affected versions
Ggv	Ggv	Version 1.0.2
Ghostview	Ghostview	Versions 1.3, 1.4, 1.4.1, 1.5
Gv	Gv	Versions 2.7.6, 2.7b1, 2.7b2, 2.7b3, 2.7b4, 2.7b5

Public exploit code

Impact

Affected products

References