Lucene search

K
nvd[email protected]NVD:CVE-2002-0838
HistoryOct 10, 2002 - 4:00 a.m.

CVE-2002-0838

2002-10-1004:00:00
web.nvd.nist.gov

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Affected configurations

NVD
Node
ggvggvMatch1.0.2
OR
ghostviewghostviewMatch1.3
OR
ghostviewghostviewMatch1.4
OR
ghostviewghostviewMatch1.4.1
OR
ghostviewghostviewMatch1.5
OR
gvgvMatch2.7.6
OR
gvgvMatch2.7b1
OR
gvgvMatch2.7b2
OR
gvgvMatch2.7b3
OR
gvgvMatch2.7b4
OR
gvgvMatch2.7b5
OR
gvgvMatch2.9.4
OR
gvgvMatch3.0.0
OR
gvgvMatch3.0.4
OR
gvgvMatch3.1.4
OR
gvgvMatch3.1.6
OR
gvgvMatch3.2.4
OR
gvgvMatch3.4.2
OR
gvgvMatch3.4.3
OR
gvgvMatch3.4.12
OR
gvgvMatch3.5.2
OR
gvgvMatch3.5.3
OR
gvgvMatch3.5.8

References

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.6%