CVE-2002-0838: Buffer Overflow
Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0838?
CVE-2002-0838 has a high severity due to the potential for remote code execution.
How do I fix CVE-2002-0838?
To fix CVE-2002-0838, upgrade gv to version 3.5.9 or later, and ensure other affected software is updated accordingly.
What versions are impacted by CVE-2002-0838?
CVE-2002-0838 affects gv versions 3.5.8 and earlier, gvv 1.0.2 and earlier, and earlier versions of gnome-gv and kghostview.
What types of files exploit CVE-2002-0838?
CVE-2002-0838 can be exploited through malformed PDF or PostScript files.
Is CVE-2002-0838 still a concern today?
While CVE-2002-0838 was reported in 2002, systems using affected versions of the software may still be at risk if not updated.