CVE-2006-5864

CVE-2006-5864 describes a stack-based buffer overflow in the ps_gettext function of GNU gv 3.6.2 and earlier, which can also affect products like Evince that utilize gv. This vulnerability allows user-assisted attackers to execute arbitrary code by crafting PostScript files with excessively long comments in headers such as DocumentMedia or DocumentPaperSizes. With a CVSS score of 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P), exploitation requires user interaction and has a high attack complexity, but can lead to partial compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, an ExploitDB entry exists for Evince, indicating public exploit code availability, though there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.