Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
gv远程缓冲区溢出漏洞
Vulnerability Description
gv是一款PDF和Postscript文件的查看程序，由Johannes Plass维护，可使用在多种Unix操作系统下。 gv不安全的使用sscanf()调用解析PostScript和PDF文件，攻击者可以利用这个漏洞以用户进程权限在系统上执行任意指令。 要利用这个漏洞，攻击者必须发送PDF或者PostScript文件并诱使用户从命令查看文件，由于gv一般不以setuid root属性安装，攻击者只能利用这个漏洞以查看文件进程的权限执行任意指令。由于问题出现发生在用于解析PostScript和PDF文件
CVSS Information
N/A
Vulnerability Type
N/A