Read the docs
TI-2002-00814 Aliases CVE-2002-0838GHSA-8534-65wr-c3fm

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90…

Priority LOW 25Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Why it matters now

EPSS 0.02025 81st percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 23

CPEVersionsRoleVendor
cpe:2.3:a:ggv:ggv:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableGgv
cpe:2.3:a:ghostview:ghostview:1.3:*:*:*:*:*:*:*1.3VulnerableGhostview
cpe:2.3:a:ghostview:ghostview:1.4:*:*:*:*:*:*:*1.4VulnerableGhostview
cpe:2.3:a:ghostview:ghostview:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableGhostview
cpe:2.3:a:ghostview:ghostview:1.5:*:*:*:*:*:*:*1.5VulnerableGhostview
cpe:2.3:a:gv:gv:2.7.6:*:*:*:*:*:*:*2.7.6VulnerableGv
cpe:2.3:a:gv:gv:2.7b1:*:*:*:*:*:*:*2.7b1VulnerableGv
cpe:2.3:a:gv:gv:2.7b2:*:*:*:*:*:*:*2.7b2VulnerableGv
cpe:2.3:a:gv:gv:2.7b3:*:*:*:*:*:*:*2.7b3VulnerableGv
cpe:2.3:a:gv:gv:2.7b4:*:*:*:*:*:*:*2.7b4VulnerableGv
  • cpe:2.3:a:ggv:ggv:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Ggv
  • cpe:2.3:a:ghostview:ghostview:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Ghostview
  • cpe:2.3:a:ghostview:ghostview:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·Ghostview
  • cpe:2.3:a:ghostview:ghostview:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Ghostview
  • cpe:2.3:a:ghostview:ghostview:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Ghostview
  • cpe:2.3:a:gv:gv:2.7.6:*:*:*:*:*:*:* Versions 2.7.6 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:2.7b1:*:*:*:*:*:*:* Versions 2.7b1 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:2.7b2:*:*:*:*:*:*:* Versions 2.7b2 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:2.7b3:*:*:*:*:*:*:* Versions 2.7b3 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:2.7b4:*:*:*:*:*:*:* Versions 2.7b4 Vulnerable ·Gv
Show 13 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:gv:gv:2.7b5:*:*:*:*:*:*:*2.7b5VulnerableGv
cpe:2.3:a:gv:gv:2.9.4:*:*:*:*:*:*:*2.9.4VulnerableGv
cpe:2.3:a:gv:gv:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableGv
cpe:2.3:a:gv:gv:3.0.4:*:*:*:*:*:*:*3.0.4VulnerableGv
cpe:2.3:a:gv:gv:3.1.4:*:*:*:*:*:*:*3.1.4VulnerableGv
cpe:2.3:a:gv:gv:3.1.6:*:*:*:*:*:*:*3.1.6VulnerableGv
cpe:2.3:a:gv:gv:3.2.4:*:*:*:*:*:*:*3.2.4VulnerableGv
cpe:2.3:a:gv:gv:3.4.2:*:*:*:*:*:*:*3.4.2VulnerableGv
cpe:2.3:a:gv:gv:3.4.3:*:*:*:*:*:*:*3.4.3VulnerableGv
cpe:2.3:a:gv:gv:3.4.12:*:*:*:*:*:*:*3.4.12VulnerableGv
cpe:2.3:a:gv:gv:3.5.2:*:*:*:*:*:*:*3.5.2VulnerableGv
cpe:2.3:a:gv:gv:3.5.3:*:*:*:*:*:*:*3.5.3VulnerableGv
cpe:2.3:a:gv:gv:3.5.8:*:*:*:*:*:*:*3.5.8VulnerableGv
  • cpe:2.3:a:gv:gv:2.7b5:*:*:*:*:*:*:* Versions 2.7b5 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:2.9.4:*:*:*:*:*:*:* Versions 2.9.4 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.1.4:*:*:*:*:*:*:* Versions 3.1.4 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.1.6:*:*:*:*:*:*:* Versions 3.1.6 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.4.2:*:*:*:*:*:*:* Versions 3.4.2 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.4.3:*:*:*:*:*:*:* Versions 3.4.3 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.4.12:*:*:*:*:*:*:* Versions 3.4.12 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.5.2:*:*:*:*:*:*:* Versions 3.5.2 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.5.3:*:*:*:*:*:*:* Versions 3.5.3 Vulnerable ·Gv
  • cpe:2.3:a:gv:gv:3.5.8:*:*:*:*:*:*:* Versions 3.5.8 Vulnerable ·Gv

Remediation

Red Hat 1 advisory

  • RHSA-2002:211 Released 2002-10-10 · Red Hat rating Important
    ggv security update
    • Red Hat Enterprise Linux AS (Advanced Server) version 2.1
    • Red Hat Linux Advanced Workstation 2.1

Vendor assessments

Red Hat

Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 Fixed RHSA-2002:211
Red Hat Linux 6.2Fixed RHSA-2002:207
Red Hat Linux 7.0Fixed RHSA-2002:207
Red Hat Linux 7.1Fixed RHSA-2002:207
Red Hat Linux 7.2Fixed RHSA-2002:207
Red Hat Linux 7.3Fixed RHSA-2002:207
Red Hat Linux 8.0Fixed RHSA-2002:207
Red Hat Linux Advanced Workstation 2.1Fixed RHSA-2002:211
Red Hat Powertools 7.0Fixed RHSA-2002:212
Red Hat Powertools 7.1Fixed RHSA-2002:212

Timeline

  1. 2026-10-02 Threatist record created from CVE-2002-0838
  2. 2026-10-03 Alias added: GHSA-8534-65wr-c3fm

References

Patch 1

Advisory 10

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences