CVE-2002-0838: Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows…

Description

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Exploitation

Is it being used?

Exploit prediction (EPSS)2.0% · higher than 81% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

GV

GV · GV

2.7.6; 2.7b1; 2.7b2; 2.7b3; 2.7b4; 2.7b5; +12 more · source: NVD

GG

Ggv · Ggv

1.0.2 · source: NVD

GH

Ghostview · Ghostview

1.3; 1.4; 1.4.1; 1.5 · source: NVD