Bug 215265

Summary:	CVE-2006-5864: gv (ghostview) <= 3.6.2 stack-based buffer overflow
Product:	[Retired] Fedora Legacy	Reporter:	David Eisenstein <deisenst>
Component:	gv	Assignee:	Fedora Legacy Bugs <bugs>
Status:	CLOSED WONTFIX	QA Contact:	David Lawrence <dkl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	orion
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5864
Whiteboard:	LEGACY, rh73, rh90, 3
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-08-30 19:57:13 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	215136
Bug Blocks:

Description David Eisenstein 2006-11-13 03:43:55 UTC

+++ This bug was initially created as a clone of Bug #215136 +++

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-5864

"Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv
3.6.2, and possibly earlier versions, allows user-assisted attackers to execute
arbitrary code via a PostScript (PS) file with certain headers that contain long
comments, as demonstrated using the DocumentMedia header."

Comment 1 Jesse Keating 2007-08-30 19:57:13 UTC

Fedora Legacy project has ended.  These will not be fixed by Fedora Legacy.