CVE-2006-5864
Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 15.2%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the (1) DocumentMedia, (2) DocumentPaperSizes, and possibly (3) PageMedia and (4) PaperSize headers. NOTE: this issue can be exploited through other products that use gv such as evince.
- CVSS 2.0
- 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 15.21% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- gnu/gv
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/22787Vendor Advisory
- http://secunia.com/advisories/22932Vendor Advisory
- http://secunia.com/advisories/23006Vendor Advisory
- http://secunia.com/advisories/23018Vendor Advisory
- http://secunia.com/advisories/23111Vendor Advisory
- http://secunia.com/advisories/23118Vendor Advisory
- http://secunia.com/advisories/23183Vendor Advisory
- http://secunia.com/advisories/23266Vendor Advisory
- http://secunia.com/advisories/23306Vendor Advisory
- http://secunia.com/advisories/23335Vendor Advisory
- http://secunia.com/advisories/23353Vendor Advisory
- http://secunia.com/advisories/23409Vendor Advisory
- http://secunia.com/advisories/23579Vendor Advisory
- http://secunia.com/advisories/24649Vendor Advisory
- http://secunia.com/advisories/24787Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200611-20.xml
- http://security.gentoo.org/glsa/glsa-200703-24.xml
- http://security.gentoo.org/glsa/glsa-200704-06.xml
- http://www.debian.org/security/2006/dsa-1214
- http://www.debian.org/security/2006/dsa-1243
- http://www.kb.cert.org/vuls/id/352825US Government Resource
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:214
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:229
- http://www.novell.com/linux/security/advisories/2006_26_sr.html
- http://www.novell.com/linux/security/advisories/2006_28_sr.html
- http://www.novell.com/linux/security/advisories/2006_29_sr.html
- http://www.securityfocus.com/archive/1/451057/100/0/threaded
- http://www.securityfocus.com/archive/1/451422/100/200/threaded
- http://www.securityfocus.com/archive/1/452868/100/0/threaded
- http://www.securityfocus.com/bid/20978Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.