Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2006-5864 — Improper Restriction of Operations within the Bounds of a Memory Buffer in GV
CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer15 documents9 sources
Severity
5.1MEDIUMNVD
EPSS
30.7%
top 3.27%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedNov 11
Latest updateMay 1
Description
Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the (1) DocumentMedia, (2) DocumentPaperSizes, and possibly (3) PageMedia and (4) PaperSize headers. NOTE: this issue can be exploited through other products that use gv such as evince.
CVSS vector
AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4
Affected Packages3 packages
🔴Vulnerability Details
3💥Exploits & PoCs
1📋Vendor Advisories
5Debian▶
CVE-2006-5864: evince - Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2,...↗2006