← Vulnerability feed

Vulnerability record · CVE-2002-2047 · published 31 December 2002

CVE-2002-2047: Sketch vulnerability

Sketch · Sketch

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.

10.0 CVSS 2.0 High EPSS 3.3% · top 12.0%
10.0CVSS 2.0 base score
3.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

The file preview functionality in Sketch 0.6.12 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an encapsulated Postscript (EPS) file.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://securitytracker.com/id?1003818 Patch
http://sketch.sourceforge.net/oldnews.html#N1
http://www.iss.net/security_center/static/8469.php Patch
http://www.securityfocus.com/bid/4296 Patch
http://securitytracker.com/id?1003818 Patch
http://sketch.sourceforge.net/oldnews.html#N1
http://www.iss.net/security_center/static/8469.php Patch
http://www.securityfocus.com/bid/4296 Patch

Track CVE-2002-2047 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-40531Sketch unrestricted file upload vulnerabilitySketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quar…EPSS 33%

Source: NIST National Vulnerability Database (record CVE-2002-2047), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.