240 matches found
CVE-2006-5864
Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the 1 DocumentMedia, 2...
CVE-2006-5864
Technical details (affected product/component/versions/root cause/impact/remediation) are not publicly provided in the supplied documents. Monitor for updates from the connected sources for concrete information.
GNU GV浏览器ps_gettext()函数栈溢出漏洞
gv是X窗口系统下的PostScript和PDF文件浏览器。 gv在处理PS文件中畸形的头时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 gv浏览器的ps.c文件中的psgettext函数存在栈溢出漏洞，问题在于将PS文件的一些特定头（如%%DocumentMedia:）中的超长标注无条件的拷贝到了text（栈上257字节长的缓冲区），导致远程攻击者可以通过诱骗用户打开恶意的文件导致执行任意代码。 GNU gv 3.6.2 GNU gv 3.6.1 GNU gv 3.6 GNU gv 3.5.8...
GNU gv buffer overflow
Stack buffer overflow overrun on oversized PostScript comments...
[Full-disclosure] GNU gv Stack Overflow Vulnerability
GNU gv Stack Overflow Vulnerability //----- Advisory Program : GNU gv Homepage : http://www.gnu.org/software/gv/ Tested version : 3.6.2 Found by : r.lifchitz at sysdream dot com This advisory : r.lifchitz at sysdream dot com Discovery date : 2006/11/06 Vendor notified : 2006/11/09 //-----...
CVE-2004-1717
CVE-2004-1717 describes multiple buffer overflows in the ps.c file’s psscan function within the gv (ghostview) project. A remote attacker could cause arbitrary code execution by supplying a Postscript file with an excessively long value for one of several fields (BoundingBox, comment, Orientation...
CVE-2004-1717
Multiple buffer overflows in the psscan function in ps.c for gv ghostview allow remote attackers to execute arbitrary code via a Postscript file with a long 1 BoundingBox, 2 comment, 3 Orientation, 4 PageOrder, or 5 Pages value...
Debian DSA-176-1 : gv - buffer overflow
Zen-parse discovered a buffer overflow in gv, a PostScript and PDF viewer for X11. This problem is triggered by scanning the PostScript file and can be exploited by an attacker sending a malformed PostScript or PDF file. The attacker is able to cause arbitrary code to be run with the privileges o...
Debian DSA-179-1 : gnome-gv - buffer overflow
Zen-parse discovered a buffer overflow in gv, a PostScript and PDF viewer for X11. The same code is present in gnome-gv. This problem is triggered by scanning the PostScript file and can be exploited by an attacker sending a malformed PostScript or PDF file. The attacker is able to cause arbitrar...
GLSA-200408-10 : gv: Exploitable Buffer Overflow
The remote host is affected by the vulnerability described in GLSA-200408-10 gv: Exploitable Buffer Overflow gv contains a buffer overflow vulnerability where an unsafe sscanf call is used to interpret PDF and PostScript files. Impact : By enticing a user to view a malformed PDF or PostScript fil...
GV PostScript Viewer Remote Buffer overflow Exploit (2)
Exploit for linux platform in category remote exploits ======================================================= GV PostScript Viewer Remote Buffer overflow Exploit 2 ======================================================= there are at least 4 other stack buffer overflows, and 2 heap overflows. the...
CVE-2004-1717
Multiple buffer overflows in the psscan function in ps.c for gv ghostview allow remote attackers to execute arbitrary code via a Postscript file with a long 1 BoundingBox, 2 comment, 3 Orientation, 4 PageOrder, or 5 Pages value...
CVE-2004-1717
Multiple buffer overflows in the psscan function in ps.c for gv ghostview allow remote attackers to execute arbitrary code via a Postscript file with a long 1 BoundingBox, 2 comment, 3 Orientation, 4 PageOrder, or 5 Pages value...
GV PostScript Viewer Remote Buffer overflow Exploit
Exploit for linux platform in category remote exploits =================================================== GV PostScript Viewer Remote Buffer overflow Exploit =================================================== / gv postscript viewer exploit , infamous42md AT hotpop DOT com run of the mill bof...
GV PostScript Viewer - Remote Buffer Overflow (1)
GV PostScript Viewer - Remote Buffer Overflow 1 / gv postscript viewer exploit , infamous42md AT hotpop DOT com run of the mill bof. spawns a remote shell on port 7000. woopty doo. if someone has been able to exploit the heap overflow in cfengine, please email me and teach me something. after day...
GV PostScript Viewer - Remote Buffer Overflow (1)
/ gv postscript viewer exploit , infamous42md AT hotpop DOT com run of the mill bof. spawns a remote shell on port 7000. woopty doo. if someone has been able to exploit the heap overflow in cfengine, please email me and teach me something. after days of pain i've concluded it's not possible b/c y...
[Full-Disclosure] IFH-ADV-31339 Exploitable Buffer Overflow in gv
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploitable Buffer Overflow in gv Infohacking Security Advisory 08.04.04 www.infohacking.com Aug 04, 2004 I. BACKGROUND Infohacking team me and myself discovered a new and unreported local root vulnerability in gv. II. DESCRIPTION The gv program that ...
Mandrake Linux Security Advisory : gv (MDKSA-2002:069)
A buffer overflow was discovered in gv versions 3.5.8 and earlier by Zen Parse. The problem is triggered by scanning a file and can be exploited by an attacker sending a malformed PostScript or PDF file. This would result in arbitrary code being executed with the privilege of the user viewing the...
RHEL 2.1 : ggv (RHSA-2002:211)
Updated packages for gv, ggv, and kdegraphics fix a local buffer overflow when reading malformed PDF or PostScript files. Updated 07 Jan 2003 Added fixed packages for the Itanium IA64 architecture. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 Gv and ggv are user interface...