Red Hat Security AdvisoryRHSA-2011:0009
evince security update
Released 2011-01-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) evince-2.28.2-14.el6_0.1, evince-dvi-2.28.2-14.el6_0.1, evince-libs-2.28.2-14.el6_0.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) evince-2.28.2-14.el6_0.1, evince-devel-2.28.2-14.el6_0.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) evince-2.28.2-14.el6_0.1, evince-devel-2.28.2-14.el6_0.1, evince-dvi-2.28.2-14.el6_0.1 +1
- Red Hat Enterprise Linux Server (v. 6) evince-2.28.2-14.el6_0.1, evince-dvi-2.28.2-14.el6_0.1, evince-libs-2.28.2-14.el6_0.1 +1
- Red Hat Enterprise Linux Server Optional (v. 6) evince-2.28.2-14.el6_0.1, evince-devel-2.28.2-14.el6_0.1, evince-devel-2.28.2-14.el6_0.1.ppc
- Red Hat Enterprise Linux Workstation (v. 6) evince-2.28.2-14.el6_0.1, evince-dvi-2.28.2-14.el6_0.1, evince-libs-2.28.2-14.el6_0.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) evince-2.28.2-14.el6_0.1, evince-devel-2.28.2-14.el6_0.1
Fixes 4 records
Priority MEDIUM 49
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (applica…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.1427 · Published 2011-01-07 · Partial fix CWE-119
Priority MEDIUM 42
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05994 · Published 2011-01-07 · Fixed CWE-189
Priority MEDIUM 41
Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted fo…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.04935 · Published 2011-01-07 · Fixed CWE-20
Priority MEDIUM 41
Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted fo…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.04935 · Published 2011-01-07 · Fixed CWE-20
THREATIST.IORead the docs