What’s Vulnerable › Vulnerabilities

CVE-2006-5864

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 16.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-11-11 · updated 2026-06-16
• Weakness: CWE-119

Description

Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the (1) DocumentMedia, (2) DocumentPaperSizes, and possibly (3) PageMedia and (4) PaperSize headers. NOTE: this issue can be exploited through other products that use gv such as evince.

Affected products

• GNU Gv: 3.5.8, 3.6.0, 3.6.1, 3.6.2

References

• http://secunia.com/advisories/22787
• http://secunia.com/advisories/22932
• http://secunia.com/advisories/23006
• http://secunia.com/advisories/23018
• http://secunia.com/advisories/23111
• http://secunia.com/advisories/23118
• http://secunia.com/advisories/23183
• http://secunia.com/advisories/23266
• http://secunia.com/advisories/23306
• http://secunia.com/advisories/23335
• http://secunia.com/advisories/23353
• http://secunia.com/advisories/23409

Get alerted when CVE-2006-5864 or the next vulnerability affects your stack