CVE-2004-1717

2004-08-1604:00:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.042

Percentile

92.2%

JSON

Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary code via a Postscript file with a long (1) BoundingBox, (2) comment, (3) Orientation, (4) PageOrder, or (5) Pages value.

Affected configurations

Nvd

Node

gvgvMatch2.7.6

gvgvMatch2.7b1

gvgvMatch2.7b2

gvgvMatch2.7b3

gvgvMatch2.7b4

gvgvMatch2.7b5

gvgvMatch2.9.4

gvgvMatch3.0.0

gvgvMatch3.0.4

gvgvMatch3.1.4

gvgvMatch3.1.6

gvgvMatch3.2.4

gvgvMatch3.4.2

gvgvMatch3.4.3

gvgvMatch3.4.12

gvgvMatch3.5.2

gvgvMatch3.5.3

gvgvMatch3.5.8

VendorProductVersionCPE
gvgv2.7.6cpe:2.3:a:gv:gv:2.7.6:*:*:*:*:*:*:*
gvgv2.7b1cpe:2.3:a:gv:gv:2.7b1:*:*:*:*:*:*:*
gvgv2.7b2cpe:2.3:a:gv:gv:2.7b2:*:*:*:*:*:*:*
gvgv2.7b3cpe:2.3:a:gv:gv:2.7b3:*:*:*:*:*:*:*
gvgv2.7b4cpe:2.3:a:gv:gv:2.7b4:*:*:*:*:*:*:*
gvgv2.7b5cpe:2.3:a:gv:gv:2.7b5:*:*:*:*:*:*:*
gvgv2.9.4cpe:2.3:a:gv:gv:2.9.4:*:*:*:*:*:*:*
gvgv3.0.0cpe:2.3:a:gv:gv:3.0.0:*:*:*:*:*:*:*
gvgv3.0.4cpe:2.3:a:gv:gv:3.0.4:*:*:*:*:*:*:*
gvgv3.1.4cpe:2.3:a:gv:gv:3.1.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
gv	gv	2.7.6	cpe:2.3:a:gv:gv:2.7.6:::::::*
gv	gv	2.7b1	cpe:2.3:a:gv:gv:2.7b1:::::::*
gv	gv	2.7b2	cpe:2.3:a:gv:gv:2.7b2:::::::*
gv	gv	2.7b3	cpe:2.3:a:gv:gv:2.7b3:::::::*
gv	gv	2.7b4	cpe:2.3:a:gv:gv:2.7b4:::::::*
gv	gv	2.7b5	cpe:2.3:a:gv:gv:2.7b5:::::::*
gv	gv	2.9.4	cpe:2.3:a:gv:gv:2.9.4:::::::*
gv	gv	3.0.0	cpe:2.3:a:gv:gv:3.0.0:::::::*
gv	gv	3.0.4	cpe:2.3:a:gv:gv:3.0.4:::::::*
gv	gv	3.1.4	cpe:2.3:a:gv:gv:3.1.4:::::::*