CVE Vulnerabilities

CVE-2002-1569

Published: Nov 17, 2003 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.

Affected Software

NameVendorStart VersionEnd Version
GhostviewGhostview1.3 (including)1.3 (including)
GhostviewGhostview1.4 (including)1.4 (including)
GhostviewGhostview1.4.1 (including)1.4.1 (including)
GhostviewGhostview1.5 (including)1.5 (including)
GvGv2.7.6 (including)2.7.6 (including)
GvGv2.7b1 (including)2.7b1 (including)
GvGv2.7b2 (including)2.7b2 (including)
GvGv2.7b3 (including)2.7b3 (including)
GvGv2.7b4 (including)2.7b4 (including)
GvGv2.7b5 (including)2.7b5 (including)
GvGv2.9.4 (including)2.9.4 (including)
GvGv3.0.0 (including)3.0.0 (including)
GvGv3.0.4 (including)3.0.4 (including)
GvGv3.1.4 (including)3.1.4 (including)
GvGv3.1.6 (including)3.1.6 (including)
GvGv3.2.4 (including)3.2.4 (including)
GvGv3.4.2 (including)3.4.2 (including)
GvGv3.4.3 (including)3.4.3 (including)
GvGv3.4.12 (including)3.4.12 (including)
GvGv3.5.2 (including)3.5.2 (including)
GvGv3.5.3 (including)3.5.3 (including)
GvGv3.5.8 (including)3.5.8 (including)

References