Integer overflow in the openpsfile function in gsinterf.c for Jan Kybic BitMap Viewer (BMV) 1.2 allows local users to execute arbitrary code via a PostScript (PS) file containing a large number of pages value, which leads to a resultant buffer overflow.
https://exchange.xforce.ibmcloud.com/vulnerabilities/22815
http://www.securityfocus.com/bid/15153
http://www.debian.org/security/2006/dsa-981
http://securitytracker.com/id?1015086
http://secunia.com/advisories/19029