Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2017-1000083

evince: command injection via filename in tar-compressed comics archive

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

CVSS 3.0 · 7.8 High EPSS 51.1% KEV · Not listed
Vendors
Debian Gnome Redhat
Products
Debian Linux Evince Enterprise Linux and 6 more
CVE-2010-2641

evince: Array index errror in DVI file VF font parser

Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

CVSS 2.0 · 7.6 High EPSS 4.9% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Evince
CVE-2010-2642

t1lib: Heap based buffer overflow in DVI file AFM font parser

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

CVSS 2.0 · 7.6 High EPSS 14.3% KEV · Not listed
Vendors
Redhat T1lib Tug
Products
Enterprise Linux Evince T1lib and 1 more
CVE-2010-2643

evince: Integer overflow in DVI file TFM font parser

Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

CVSS 2.0 · 7.6 High EPSS 6.0% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Evince
CVE-2011-0433

t1lib: Heap-based buffer overflow DVI file AFM font parser

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

CVSS 2.0 · 6.8 Medium EPSS 4.2% KEV · Not listed
Vendors
Gnome Redhat T1lib and 1 more
Products
Evince Enterprise Linux T1lib and 1 more
CVE-2010-2640

evince: Array index errror in DVI file PK font parser

Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

CVSS 2.0 · 7.6 High EPSS 4.9% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Evince
CVE-2019-11459

evince: uninitialized memory use in function tiff_document_render() and tiff_document_get_thumbnail()

The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 3 more
Products
Ubuntu Linux Debian Linux Fedora and 6 more