CVE-2004-1717: Buffer Overflow
Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary code via a Postscript file with a long (1) BoundingBox, (2) comment, (3) Orientation, (4) PageOrder, or (5) Pages value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1717?
CVE-2004-1717 has a high severity rating due to multiple buffer overflows allowing remote code execution.
How do I fix CVE-2004-1717?
To fix CVE-2004-1717, you should update to a patched version of gv that addresses these buffer overflow vulnerabilities.
What versions of gv are affected by CVE-2004-1717?
CVE-2004-1717 affects multiple versions of gv including 2.7b1, 2.7b2, 2.7b3, 2.7b4, 2.7b5, 2.7.6, 3.0.0, 3.0.4, 3.1.4, 3.1.6, 3.2.4, 3.4.2, 3.4.3, 3.4.12, 3.5.2, 3.5.3, and 3.5.8.
What type of attack does CVE-2004-1717 enable?
CVE-2004-1717 enables remote attackers to execute arbitrary code on vulnerable systems through crafted Postscript files.
Are there any workarounds for CVE-2004-1717?
A temporary workaround for CVE-2004-1717 is to avoid opening untrusted Postscript files until the software is updated.