CVE-2002-1569: High severity ghostview ghostview vulnerability
Published Oct 25, 2003
·Updated
gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.
Affected Software
22 affected components
ghostview ghostview=1.3
ghostview ghostview=1.4
ghostview ghostview=1.4.1
ghostview ghostview=1.5
gv gv=2.7.6
gv gv=2.7b1
gv gv=2.7b2
gv gv=2.7b3
gv gv=2.7b4
gv gv=2.7b5
gv gv=2.9.4
gv gv=3.0.0
gv gv=3.0.4
gv gv=3.1.4
gv gv=3.1.6
gv gv=3.2.4
gv gv=3.4.2
gv gv=3.4.3
gv gv=3.4.12
gv gv=3.5.2
gv gv=3.5.3
gv gv=3.5.8
Remediation
Patch Available
Patch Available
Event History
Oct 25, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1569?
CVE-2002-1569 is categorized as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2002-1569?
To fix CVE-2002-1569, update to a patched version of the gv software that resolves the command execution issue.
3
Which versions of gv are affected by CVE-2002-1569?
CVE-2002-1569 affects gv versions up to and including 3.5.8, as well as potentially earlier versions.
4
Can CVE-2002-1569 be exploited remotely?
Yes, CVE-2002-1569 can be exploited remotely through crafted filenames for PDF or gzip files.
5
What types of files can trigger CVE-2002-1569?
CVE-2002-1569 can be triggered by specially crafted PDF or gzip filenames that contain shell metacharacters.