CVE-2002-0838: Ggv

Medium severity, CVSS 4.6. EPSS: 2% chance of exploitation in the next 30 days.

Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows attackers to execute arbitrary code via a malformed (a) PDF or (b) PostScript file, which is processed by an unsafe call to sscanf.

Affected products

• Ggv Ggv: version 1.0.2 only
• Ghostview Ghostview: version 1.3 only; version 1.4 only; version 1.4.1 only; version 1.5 only
• Gv Gv: version 2.7.6 only; version 2.7b1 only; version 2.7b2 only; version 2.7b3 only; version 2.7b4 only; version 2.7b5 only; …

Published 2002-10-10. Last modified 2026-06-16.