Stack-Based Buffer Overflow in GNU gv Affects Multiple Versions

CVE-2006-5864

Summary

A stack-based buffer overflow vulnerability exists in the ps_gettext function within ps.c of GNU gv, specifically in version 3.6.2 and earlier. This flaw allows attackers to craft PostScript files with malicious headers that include excessively long comments. By exploiting this vulnerability, an attacker could execute arbitrary code on the target system. The exploitation can also occur through related applications utilizing gv, such as evince, making the issue more widespread. It is crucial for users to apply security patches and updates to mitigate potential risks.

References