CVE-2002-1569 : gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbi

gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.

Published 2003-11-17 05:00:00

Updated 2025-04-03 01:03:51

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2002-1569

Ghostview » Ghostview » Version: 1.4.1
cpe:2.3:a:ghostview:ghostview:1.4.1:*:*:*:*:*:*:*
Matching versions
Ghostview » Ghostview » Version: 1.5
cpe:2.3:a:ghostview:ghostview:1.5:*:*:*:*:*:*:*
Matching versions
Ghostview » Ghostview » Version: 1.3
cpe:2.3:a:ghostview:ghostview:1.3:*:*:*:*:*:*:*
Matching versions
Ghostview » Ghostview » Version: 1.4
cpe:2.3:a:ghostview:ghostview:1.4:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 2.7.6
cpe:2.3:a:gv:gv:2.7.6:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 2.7b1
cpe:2.3:a:gv:gv:2.7b1:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.0.4
cpe:2.3:a:gv:gv:3.0.4:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.1.4
cpe:2.3:a:gv:gv:3.1.4:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.5.8
cpe:2.3:a:gv:gv:3.5.8:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 2.7b2
cpe:2.3:a:gv:gv:2.7b2:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 2.7b3
cpe:2.3:a:gv:gv:2.7b3:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.1.6
cpe:2.3:a:gv:gv:3.1.6:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.2.4
cpe:2.3:a:gv:gv:3.2.4:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 2.9.4
cpe:2.3:a:gv:gv:2.9.4:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.0.0
cpe:2.3:a:gv:gv:3.0.0:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.4.3
cpe:2.3:a:gv:gv:3.4.3:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.5.2
cpe:2.3:a:gv:gv:3.5.2:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.5.3
cpe:2.3:a:gv:gv:3.5.3:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 2.7b4
cpe:2.3:a:gv:gv:2.7b4:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 2.7b5
cpe:2.3:a:gv:gv:2.7b5:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.4.12
cpe:2.3:a:gv:gv:3.4.12:*:*:*:*:*:*:*
Matching versions
GV » GV » Version: 3.4.2
cpe:2.3:a:gv:gv:3.4.2:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2002-1569

EPSS FAQ

2.51%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 84 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2002-1569

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2002-1569

http://marc.info/?l=bugtraq&m=103348446009076&w=2

'ASA-0000: GV Execution of Arbitrary Shell Commands' - MARC
http://archives.neohapsis.com/archives/bugtraq/2002-10/0033.html
http://www.epita.fr/~bevand_m/asa/asa-0000

Page non trouvée - EPITA
Exploit;Patch;Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/10231

gv system function malformed file name shell command execution CVE-2002-1569 Vulnerability Report
http://www.securityfocus.com/bid/5840

Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2002-1569

Products affected by CVE-2002-1569

Exploit prediction scoring system (EPSS) score for CVE-2002-1569

CVSS scores for CVE-2002-1569

References for CVE-2002-1569