CVE Feed

Dashboard / CVE / CVE-2006-5864

CVE-2006-5864

Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the (1) DocumentMedia, (2) DocumentPaperSizes, and possibly (3) PageMedia and (4) PaperSize headers. NOTE: this issue can be exploited through other products that use gv such as evince.

Published:Nov 11, 2006

Last Modified:Apr 23, 2026

EPS:Nov 11, 2006

EPSS Score:0.30732

CVSS Score:5.1

Affected Products

Vendor

Product

Action

Vendor

Gnu

Product

Gv

Gnu

Gv

Exploits

http://www.securityfocus.com/bid/20978 http://www.securityfocus.com/bid/20978 https://www.exploit-db.com/exploits/2858

Common Weakness Enumeration

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-10 Buffer Overflow via Environment Variables

CAPEC-100 Overflow Buffers

CAPEC-123 Buffer Manipulation

CAPEC-14 Client-side Injection-induced Buffer Overflow

CAPEC-24 Filter Failure through Buffer Overflow

CAPEC-42 MIME Conversion

CAPEC-44 Overflow Binary Resource File

CAPEC-45 Buffer Overflow via Symbolic Links

CAPEC-46 Overflow Variables and Tags

CAPEC-47 Buffer Overflow via Parameter Expansion

CAPEC-8 Buffer Overflow in an API Call

CAPEC-9 Buffer Overflow in Local Command-Line Utilities

Related CVEs

CVE-2010-2056 (CVSS 3.3) — GNU gv before 3.7.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.…

References

http://secunia.com/advisories/22787

http://secunia.com/advisories/22932

http://secunia.com/advisories/23006

http://secunia.com/advisories/23018

http://secunia.com/advisories/23111

http://secunia.com/advisories/23118

http://secunia.com/advisories/23183

http://secunia.com/advisories/23266

http://secunia.com/advisories/23306

http://secunia.com/advisories/23335

http://secunia.com/advisories/23353

http://secunia.com/advisories/23409

http://secunia.com/advisories/23579

http://secunia.com/advisories/24649

http://secunia.com/advisories/24787

http://security.gentoo.org/glsa/glsa-200611-20.xml

http://security.gentoo.org/glsa/glsa-200703-24.xml

http://security.gentoo.org/glsa/glsa-200704-06.xml

http://www.debian.org/security/2006/dsa-1214

http://www.debian.org/security/2006/dsa-1243

http://www.kb.cert.org/vuls/id/352825

http://www.mandriva.com/security/advisories?name=MDKSA-2006:214

http://www.mandriva.com/security/advisories?name=MDKSA-2006:229

http://www.novell.com/linux/security/advisories/2006_26_sr.html

http://www.novell.com/linux/security/advisories/2006_28_sr.html

http://www.novell.com/linux/security/advisories/2006_29_sr.html

http://www.securityfocus.com/archive/1/451057/100/0/threaded

http://www.securityfocus.com/archive/1/451422/100/200/threaded

http://www.securityfocus.com/archive/1/452868/100/0/threaded

http://www.securityfocus.com/bid/20978

http://www.ubuntu.com/usn/usn-390-1

http://www.ubuntu.com/usn/usn-390-2

http://www.ubuntu.com/usn/usn-390-3

http://www.vupen.com/english/advisories/2006/4424

http://www.vupen.com/english/advisories/2006/4747

https://exchange.xforce.ibmcloud.com/vulnerabilities/30153

https://exchange.xforce.ibmcloud.com/vulnerabilities/30555

https://issues.rpath.com/browse/RPL-850

https://www.exploit-db.com/exploits/2858

http://secunia.com/advisories/22787

http://secunia.com/advisories/22932

http://secunia.com/advisories/23006

http://secunia.com/advisories/23018

http://secunia.com/advisories/23111

http://secunia.com/advisories/23118

http://secunia.com/advisories/23183

http://secunia.com/advisories/23266

http://secunia.com/advisories/23306

http://secunia.com/advisories/23335

http://secunia.com/advisories/23353

http://secunia.com/advisories/23409

http://secunia.com/advisories/23579

http://secunia.com/advisories/24649

http://secunia.com/advisories/24787

http://security.gentoo.org/glsa/glsa-200611-20.xml

http://security.gentoo.org/glsa/glsa-200703-24.xml

http://security.gentoo.org/glsa/glsa-200704-06.xml

http://www.debian.org/security/2006/dsa-1214

http://www.debian.org/security/2006/dsa-1243

http://www.kb.cert.org/vuls/id/352825

http://www.mandriva.com/security/advisories?name=MDKSA-2006:214

http://www.mandriva.com/security/advisories?name=MDKSA-2006:229

http://www.novell.com/linux/security/advisories/2006_26_sr.html

http://www.novell.com/linux/security/advisories/2006_28_sr.html

http://www.novell.com/linux/security/advisories/2006_29_sr.html

http://www.securityfocus.com/archive/1/451057/100/0/threaded

http://www.securityfocus.com/archive/1/451422/100/200/threaded

http://www.securityfocus.com/archive/1/452868/100/0/threaded

http://www.securityfocus.com/bid/20978

http://www.ubuntu.com/usn/usn-390-1

http://www.ubuntu.com/usn/usn-390-2

http://www.ubuntu.com/usn/usn-390-3

http://www.vupen.com/english/advisories/2006/4424

http://www.vupen.com/english/advisories/2006/4747

https://exchange.xforce.ibmcloud.com/vulnerabilities/30153

https://exchange.xforce.ibmcloud.com/vulnerabilities/30555

https://issues.rpath.com/browse/RPL-850

https://www.exploit-db.com/exploits/2858

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High