peter bassill · operator
$ cve CVE-2002-0838 JSON

CVE-2002-0838 EXPLOIT

4.6
MEDIUM · CVSS 2.0 · EPSS 2% (pctl 80)

Patch early

A public exploit exists.

Description

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Scoring

CVSS4.6 (MEDIUM, v2.0)
VectorAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS2.03% — more likely to be exploited than 80% of all CVEs
On CISA KEVno
Public exploityes
Published2002-10-10
Last modified2026-06-16

Affected (3)

VendorProduct
ggvggv
ghostviewghostview
gvgv

Public exploits

SourceTitleDate
exploit-dbGV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (1)2002-09-26
exploit-dbGV 2.x/3.x - '.PDF'/'.PS' File Buffer Overflow (2)2002-09-26

References

→ the Explorer  ·  watch your stack  ·  NVD