Vulnerability in Ggv

CVE-2002-0838

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

EPSS: 0.020 (79.0th percentile) — read the EPSS interpretation.

Affected products

  • Ggv — versions 1.0.2
  • Ghostview — versions 1.3, 1.4, 1.4.1
  • Gv — versions 2.7.6, 2.7b1, 2.7b2
  • N/a — versions n/a

References