CVE-2004-1717: Buffer Overflow
First published: Mon Aug 16 2004(Updated: )
Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary code via a Postscript file with a long (1) BoundingBox, (2) comment, (3) Orientation, (4) PageOrder, or (5) Pages value.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GeoVision | =3.4.2 | |
| GeoVision | =3.5.2 | |
| GeoVision | =3.1.4 | |
| GeoVision | =3.4.12 | |
| GeoVision | =2.7b4 | |
| GeoVision | =3.5.3 | |
| GeoVision | =3.2.4 | |
| GeoVision | =2.9.4 | |
| GeoVision | =2.7b1 | |
| GeoVision | =2.7b5 | |
| GeoVision | =3.1.6 | |
| GeoVision | =2.7.6 | |
| GeoVision | =3.0.0 | |
| GeoVision | =3.0.4 | |
| GeoVision | =3.4.3 | |
| GeoVision | =2.7b3 | |
| GeoVision | =3.5.8 | |
| GeoVision | =2.7b2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-1717?
CVE-2004-1717 has a high severity rating due to multiple buffer overflows allowing remote code execution.
How do I fix CVE-2004-1717?
To fix CVE-2004-1717, you should update to a patched version of gv that addresses these buffer overflow vulnerabilities.
What versions of gv are affected by CVE-2004-1717?
CVE-2004-1717 affects multiple versions of gv including 2.7b1, 2.7b2, 2.7b3, 2.7b4, 2.7b5, 2.7.6, 3.0.0, 3.0.4, 3.1.4, 3.1.6, 3.2.4, 3.4.2, 3.4.3, 3.4.12, 3.5.2, 3.5.3, and 3.5.8.
What type of attack does CVE-2004-1717 enable?
CVE-2004-1717 enables remote attackers to execute arbitrary code on vulnerable systems through crafted Postscript files.
Are there any workarounds for CVE-2004-1717?
A temporary workaround for CVE-2004-1717 is to avoid opening untrusted Postscript files until the software is updated.
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/gv
- canonical/geovision
- version/geovision/3.4.2
- version/geovision/3.5.2
- version/geovision/3.1.4
- version/geovision/3.4.12
- version/geovision/2.7b4
- version/geovision/3.5.3
- version/geovision/3.2.4
- version/geovision/2.9.4
- version/geovision/2.7b1
- version/geovision/2.7b5
- version/geovision/3.1.6
- version/geovision/2.7.6
- version/geovision/3.0.0
- version/geovision/3.0.4
- version/geovision/3.4.3
- version/geovision/2.7b3
- version/geovision/3.5.8
- version/geovision/2.7b2