CVE-2002-0838
gv 3.5.8 - Buffer Overflow via Malformed PDF or PostScript File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2002-0838. PoCs published by infamous42md, zen-parse.
AI-analyzed exploit summary This exploit leverages a buffer overflow in gv's handling of the %%PageOrder field via an insecure sscanf() function. It generates a malicious PostScript file that, when opened, executes shellcode to spawn a remote shell on port 7000.
Description
Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.
Exploits (2)
This exploit leverages a buffer overflow in gv's handling of the %%PageOrder field via an insecure sscanf() function. It generates a malicious PostScript file that, when opened, executes shellcode to spawn a remote shell on port 7000.
This exploit targets a buffer overflow vulnerability in gv <= 3.5.8 via a maliciously crafted %%PageOrder field in a PDF/PS file. It uses a bind shell shellcode to execute arbitrary code in the context of the user opening the file.