Integer overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer (BMV) 1.2 allows local users to execute arbitrary code via a PostScript (PS) file containing a large number of pages value, which leads to a resultant buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bitmap_viewer | Jan_kybic | 1.2 (including) | 1.2 (including) |
| Bmv | Ubuntu | dapper | * |
| Bmv | Ubuntu | devel | * |
| Bmv | Ubuntu | edgy | * |
| Bmv | Ubuntu | feisty | * |