CVE-2002-1569
First published: Sat Oct 25 2003(Updated: )
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ghostview | =1.3 | |
| Ghostview | =1.4 | |
| Ghostview | =1.4.1 | |
| Ghostview | =1.5 | |
| GeoVision | =2.7.6 | |
| GeoVision | =2.7b1 | |
| GeoVision | =2.7b2 | |
| GeoVision | =2.7b3 | |
| GeoVision | =2.7b4 | |
| GeoVision | =2.7b5 | |
| GeoVision | =2.9.4 | |
| GeoVision | =3.0.0 | |
| GeoVision | =3.0.4 | |
| GeoVision | =3.1.4 | |
| GeoVision | =3.1.6 | |
| GeoVision | =3.2.4 | |
| GeoVision | =3.4.2 | |
| GeoVision | =3.4.3 | |
| GeoVision | =3.4.12 | |
| GeoVision | =3.5.2 | |
| GeoVision | =3.5.3 | |
| GeoVision | =3.5.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-1569?
CVE-2002-1569 is categorized as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2002-1569?
To fix CVE-2002-1569, update to a patched version of the gv software that resolves the command execution issue.
Which versions of gv are affected by CVE-2002-1569?
CVE-2002-1569 affects gv versions up to and including 3.5.8, as well as potentially earlier versions.
Can CVE-2002-1569 be exploited remotely?
Yes, CVE-2002-1569 can be exploited remotely through crafted filenames for PDF or gzip files.
What types of files can trigger CVE-2002-1569?
CVE-2002-1569 can be triggered by specially crafted PDF or gzip filenames that contain shell metacharacters.
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/severity
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/ghostview
- canonical/ghostview
- version/ghostview/1.3
- version/ghostview/1.4
- version/ghostview/1.4.1
- version/ghostview/1.5
- vendor/gv
- canonical/geovision
- version/geovision/2.7.6
- version/geovision/2.7b1
- version/geovision/2.7b2
- version/geovision/2.7b3
- version/geovision/2.7b4
- version/geovision/2.7b5
- version/geovision/2.9.4
- version/geovision/3.0.0
- version/geovision/3.0.4
- version/geovision/3.1.4
- version/geovision/3.1.6
- version/geovision/3.2.4
- version/geovision/3.4.2
- version/geovision/3.4.3
- version/geovision/3.4.12
- version/geovision/3.5.2
- version/geovision/3.5.3
- version/geovision/3.5.8