NVD Vulnerability Detail
Search Exploit, PoC
CVE-2002-0838
Summary

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Publication Date Oct. 10, 2002, 1 p.m.
Registration Date Jan. 29, 2021, 6:04 p.m.
Last Update Oct. 18, 2016, 11:22 a.m.
CVSS2.0 : MEDIUM
Score 4.6
Vector AV:L/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV) ローカル
攻撃条件の複雑さ(AC) 低
攻撃前の認証要否(Au) 不要
機密性への影響(C) 低
完全性への影響(I) 低
可用性への影響(A) 低
Get all privileges. いいえ
Get user privileges はい
Get other privileges いいえ
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:ggv:ggv:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ghostview:ghostview:1.3:*:*:*:*:*:*:*
cpe:2.3:a:ghostview:ghostview:1.4:*:*:*:*:*:*:*
cpe:2.3:a:ghostview:ghostview:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:ghostview:ghostview:1.5:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:2.7.6:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:2.7b1:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:2.7b2:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:2.7b3:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:2.7b4:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:2.7b5:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:2.9.4:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.0.4:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.2.4:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.4.2:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.4.3:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.4.12:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.5.2:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.5.3:*:*:*:*:*:*:*
cpe:2.3:a:gv:gv:3.5.8:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List