vulnwire
4.6med

CVE-2002-08382 exploits

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kd…

Published 24 y ago · modified 4 mo ago · JSON

CVSS
4.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.0%
percentile 81%
Public exploits
2
Exploit-DB

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Exploit prediction (EPSS)

2.02% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.

Exploits and detections

  • EDB-21872 GV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (2) · local · 2002-09-26
  • EDB-21871 GV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (1) · local · 2002-09-26

CVSS scores

Assigned byVersionScoreVector
NVD2.04.6AV:L/AC:L/Au:N/C:P/I:P/A:P

References

  • debian.org /security/2002/dsa-179 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2002:069 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • kde.org /info/security/advisory-20021008-1.txt · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2002/dsa-182 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • distro.conectiva.com.br /atualizacoes/?id=a&anuncio=000542 · vendor-advisory, x_refsource_CONECTIVA, x_transferred
  • marc.info /?l=bugtraq&m=103305615613319&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • mandriva.com /security/advisories?name=MDKSA-2002:071 · vendor-advisory, x_refsource_MANDRAKE, x_transferred
  • securityfocus.com /bid/5808 · vdb-entry, x_refsource_BID, x_transferred
  • debian.org /security/2002/dsa-176 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • iss.net /security_center/static/10201.php · vdb-entry, x_refsource_XF, x_transferred
  • redhat.com /support/errata/RHSA-2002-212.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • redhat.com /support/errata/RHSA-2002-220.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • redhat.com /support/errata/RHSA-2002-207.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • kb.cert.org /vuls/id/600777 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • sunsolve.sun.com /pub-cgi/retrieve.pl?doc=fsalert/47780&zone_32=category:security · x_refsource_CONFIRM, x_transferred
  • marc.info /?l=bugtraq&m=103487806800388&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • marc.info /?l=bugtraq&m=103305778615625&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.