Stack-Based Buffer Overflow in GNU gv Affects Multiple Versions
CVE-2006-5864

Currently unrated

Key Information:

Vendor

Gnu

Status
Vendor
CVE Published:
11 November 2006

Badges

πŸ‘Ύ Exploit Exists🟑 Public PoC🟣 EPSS 32%

What is CVE-2006-5864?

A stack-based buffer overflow vulnerability exists in the ps_gettext function within ps.c of GNU gv, specifically in version 3.6.2 and earlier. This flaw allows attackers to craft PostScript files with malicious headers that include excessively long comments. By exploiting this vulnerability, an attacker could execute arbitrary code on the target system. The exploitation can also occur through related applications utilizing gv, such as evince, making the issue more widespread. It is crucial for users to apply security patches and updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

EPSS Score

32% chance of being exploited in the next 30 days.

Timeline

  • 🟑

    Public PoC available

  • πŸ‘Ύ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.