Lucene search

MitreCVE-2002-0838

HistoryOct 10, 2002 - 4:00 a.m.

CVE-2002-0838

2002-10-1004:00:00

mitre

web.nvd.nist.gov

cve

buffer overflow

pdf

postscript

gvv

ggv

gnome-gv

kghostview

kdegraphics

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.003

Percentile

68.6%

JSON

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Affected configurations

Nvd

Node

ggvggvMatch1.0.2

ghostviewghostviewMatch1.3

ghostviewghostviewMatch1.4

ghostviewghostviewMatch1.4.1

ghostviewghostviewMatch1.5

gvgvMatch2.7.6

gvgvMatch2.7b1

gvgvMatch2.7b2

gvgvMatch2.7b3

gvgvMatch2.7b4

gvgvMatch2.7b5

gvgvMatch2.9.4

gvgvMatch3.0.0

gvgvMatch3.0.4

gvgvMatch3.1.4

gvgvMatch3.1.6

gvgvMatch3.2.4

gvgvMatch3.4.2

gvgvMatch3.4.3

gvgvMatch3.4.12

gvgvMatch3.5.2

gvgvMatch3.5.3

gvgvMatch3.5.8

VendorProductVersionCPE
ggvggv1.0.2cpe:2.3:a:ggv:ggv:1.0.2:*:*:*:*:*:*:*
ghostviewghostview1.3cpe:2.3:a:ghostview:ghostview:1.3:*:*:*:*:*:*:*
ghostviewghostview1.4cpe:2.3:a:ghostview:ghostview:1.4:*:*:*:*:*:*:*
ghostviewghostview1.4.1cpe:2.3:a:ghostview:ghostview:1.4.1:*:*:*:*:*:*:*
ghostviewghostview1.5cpe:2.3:a:ghostview:ghostview:1.5:*:*:*:*:*:*:*
gvgv2.7.6cpe:2.3:a:gv:gv:2.7.6:*:*:*:*:*:*:*
gvgv2.7b1cpe:2.3:a:gv:gv:2.7b1:*:*:*:*:*:*:*
gvgv2.7b2cpe:2.3:a:gv:gv:2.7b2:*:*:*:*:*:*:*
gvgv2.7b3cpe:2.3:a:gv:gv:2.7b3:*:*:*:*:*:*:*
gvgv2.7b4cpe:2.3:a:gv:gv:2.7b4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ggv	ggv	1.0.2	cpe:2.3:a:ggv:ggv:1.0.2:::::::*
ghostview	ghostview	1.3	cpe:2.3:a:ghostview:ghostview:1.3:::::::*
ghostview	ghostview	1.4	cpe:2.3:a:ghostview:ghostview:1.4:::::::*
ghostview	ghostview	1.4.1	cpe:2.3:a:ghostview:ghostview:1.4.1:::::::*
ghostview	ghostview	1.5	cpe:2.3:a:ghostview:ghostview:1.5:::::::*
gv	gv	2.7.6	cpe:2.3:a:gv:gv:2.7.6:::::::*
gv	gv	2.7b1	cpe:2.3:a:gv:gv:2.7b1:::::::*
gv	gv	2.7b2	cpe:2.3:a:gv:gv:2.7b2:::::::*
gv	gv	2.7b3	cpe:2.3:a:gv:gv:2.7b3:::::::*
gv	gv	2.7b4	cpe:2.3:a:gv:gv:2.7b4:::::::*