What is CVE-2002-1569?

CVE-2002-1569 is a vulnerability in Ghostview. Published 2003-11-17.

Is CVE-2002-1569 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Ghostview

CVE-2002-1569

gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.

EPSS: 0.023 (81.7th percentile) — read the EPSS interpretation.

Affected products

Ghostview — versions 1.3, 1.4, 1.4.1
Gv — versions 2.7.6, 2.7b1, 2.7b2
N/a — versions n/a

Public proof-of-concept exploits

0xCyberY/CVE-T4PDF
ARPSyndicate/cvemon

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Exploit, Patch, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2002-1569?: CVE-2002-1569 is a vulnerability in Ghostview. Published 2003-11-17.
Is CVE-2002-1569 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.