Description
Integer overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer (BMV) 1.2 allows local users to execute arbitrary code via a PostScript (PS) file containing a large number of pages value, which leads to a resultant buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗Advisories 1
- DSA-981-1 bmv - integer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20118 vdb-entry
- 19029 third-party-advisory
- http://felinemenace.org/advisories/bmv_advisory.txt
- bmv-openpsfile-overflow(22815) vdb-entry
- 15153 vdb-entry
- 17266 third-party-advisory
- 1015086 vdb-entry
- DSA-981 vendor-advisory