CVE Vulnerabilities

CVE-2002-1569

Published: Nov 17, 2003 | Modified: Apr 16, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.

Affected Software

NameVendorStart VersionEnd Version
GhostviewGhostview1.3 (including)1.3 (including)
GhostviewGhostview1.4 (including)1.4 (including)
GhostviewGhostview1.4.1 (including)1.4.1 (including)
GhostviewGhostview1.5 (including)1.5 (including)
GvGv2.7.6 (including)2.7.6 (including)
GvGv2.7b1 (including)2.7b1 (including)
GvGv2.7b2 (including)2.7b2 (including)
GvGv2.7b3 (including)2.7b3 (including)
GvGv2.7b4 (including)2.7b4 (including)
GvGv2.7b5 (including)2.7b5 (including)
GvGv2.9.4 (including)2.9.4 (including)
GvGv3.0.0 (including)3.0.0 (including)
GvGv3.0.4 (including)3.0.4 (including)
GvGv3.1.4 (including)3.1.4 (including)
GvGv3.1.6 (including)3.1.6 (including)
GvGv3.2.4 (including)3.2.4 (including)
GvGv3.4.2 (including)3.4.2 (including)
GvGv3.4.3 (including)3.4.3 (including)
GvGv3.4.12 (including)3.4.12 (including)
GvGv3.5.2 (including)3.5.2 (including)
GvGv3.5.3 (including)3.5.3 (including)
GvGv3.5.8 (including)3.5.8 (including)

References