Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2017-1000083

evince: command injection via filename in tar-compressed comics archive

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

CVSS 3.0 · 7.8 High EPSS 51.1% KEV · Not listed
Vendors
Debian Gnome Redhat
Products
Debian Linux Evince Enterprise Linux and 6 more
CVE-2017-1000159

evince: Command injection when exporting to PDF

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.

CVSS 3.0 · 7.8 High EPSS 1.4% KEV · Not listed
Vendors
Gnome
Products
Evince
CVE-2011-0433

t1lib: Heap-based buffer overflow DVI file AFM font parser

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

CVSS 2.0 · 6.8 Medium EPSS 4.2% KEV · Not listed
Vendors
Gnome Redhat T1lib and 1 more
Products
Evince Enterprise Linux T1lib and 1 more
CVE-2011-5244

t1lib: off-by-one errors in token and linetoken

Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.

CVSS 2.0 · 6.8 Medium EPSS 3.4% KEV · Not listed
Vendors
Gnome T1lib Tetex
Products
Evince T1lib Tetex
CVE-2019-11459

evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 6 more
CVE-2019-1010006

evince: buffer overflow in backend/tiff/tiff-document.c leads to DOS/possible code execution

Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Gnome and 1 more
Products
Ubuntu Linux Debian Linux Evince and 1 more