CVEvulnerability
CVE-2002-2047
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.
Affected configurations
• sketch sketch 0.6.12
References
- http://securitytracker.com/id?1003818 Patch
- http://sketch.sourceforge.net/oldnews.html#N1 sketch.sourceforge.net
- http://www.iss.net/security_center/static/8469.php Patch
- http://www.securityfocus.com/bid/4296 Patch
- http://securitytracker.com/id?1003818 Patch
- http://sketch.sourceforge.net/oldnews.html#N1 sketch.sourceforge.net
- http://www.iss.net/security_center/static/8469.php Patch
- http://www.securityfocus.com/bid/4296 Patch