Vulnerabilities > CVE-2010-2643 - Numeric Errors vulnerability in Redhat Evince
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Nessus
NASL family SuSE Local Security Checks NASL id SUSE_11_2_EVINCE-110105.NASL description Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. last seen 2020-06-01 modified 2020-06-02 plugin id 53713 published 2011-05-05 reporter This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/53713 title openSUSE Security Update : evince (openSUSE-SU-2011:0045-1) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from openSUSE Security Update evince-3774. # # The text description of this plugin is (C) SUSE LLC. # include("compat.inc"); if (description) { script_id(53713); script_version("1.5"); script_cvs_date("Date: 2019/10/25 13:36:40"); script_cve_id("CVE-2010-2640", "CVE-2010-2641", "CVE-2010-2642", "CVE-2010-2643"); script_name(english:"openSUSE Security Update : evince (openSUSE-SU-2011:0045-1)"); script_summary(english:"Check for the evince-3774 patch"); script_set_attribute( attribute:"synopsis", value:"The remote openSUSE host is missing a security update." ); script_set_attribute( attribute:"description", value: "Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues." ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.novell.com/show_bug.cgi?id=660555" ); script_set_attribute( attribute:"see_also", value:"https://lists.opensuse.org/opensuse-updates/2011-01/msg00019.html" ); script_set_attribute( attribute:"solution", value:"Update the affected evince packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:evince"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:evince-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:evince-lang"); script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:11.2"); script_set_attribute(attribute:"patch_publication_date", value:"2011/01/05"); script_set_attribute(attribute:"plugin_publication_date", value:"2011/05/05"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"SuSE Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/SuSE/release"); if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE"); if (release !~ "^(SUSE11\.2)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "11.2", release); if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); ourarch = get_kb_item("Host/cpu"); if (!ourarch) audit(AUDIT_UNKNOWN_ARCH); if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch); flag = 0; if ( rpm_check(release:"SUSE11.2", reference:"evince-2.28.2-0.3.1") ) flag++; if ( rpm_check(release:"SUSE11.2", reference:"evince-devel-2.28.2-0.3.1") ) flag++; if ( rpm_check(release:"SUSE11.2", reference:"evince-lang-2.28.2-0.3.1") ) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get()); else security_hole(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "evince / evince-devel / evince-lang"); }NASL family SuSE Local Security Checks NASL id SUSE_11_EVINCE-110105.NASL description Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. last seen 2020-06-01 modified 2020-06-02 plugin id 51599 published 2011-01-21 reporter This script is Copyright (C) 2011-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/51599 title SuSE 11.1 Security Update : evince (SAT Patch Number 3769) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from SuSE 11 update information. The text itself is # copyright (C) Novell, Inc. # if (NASL_LEVEL < 3000) exit(0); include("compat.inc"); if (description) { script_id(51599); script_version("1.6"); script_cvs_date("Date: 2019/10/25 13:36:42"); script_cve_id("CVE-2010-2640", "CVE-2010-2641", "CVE-2010-2642", "CVE-2010-2643"); script_name(english:"SuSE 11.1 Security Update : evince (SAT Patch Number 3769)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value:"The remote SuSE 11 host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues." ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.novell.com/show_bug.cgi?id=660558" ); script_set_attribute( attribute:"see_also", value:"http://support.novell.com/security/cve/CVE-2010-2640.html" ); script_set_attribute( attribute:"see_also", value:"http://support.novell.com/security/cve/CVE-2010-2641.html" ); script_set_attribute( attribute:"see_also", value:"http://support.novell.com/security/cve/CVE-2010-2642.html" ); script_set_attribute( attribute:"see_also", value:"http://support.novell.com/security/cve/CVE-2010-2643.html" ); script_set_attribute(attribute:"solution", value:"Apply SAT patch number 3769."); script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:evince"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:evince-doc"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:suse_linux:11:evince-lang"); script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:suse_linux:11"); script_set_attribute(attribute:"patch_publication_date", value:"2011/01/05"); script_set_attribute(attribute:"plugin_publication_date", value:"2011/01/21"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2011-2019 Tenable Network Security, Inc."); script_family(english:"SuSE Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/SuSE/release", "Host/SuSE/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/SuSE/release"); if (isnull(release) || release !~ "^(SLED|SLES)11") audit(AUDIT_OS_NOT, "SuSE 11"); if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu !~ "^i[3-6]86$" && "x86_64" >!< cpu && "s390x" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "SuSE 11", cpu); pl = get_kb_item("Host/SuSE/patchlevel"); if (isnull(pl) || int(pl) != 1) audit(AUDIT_OS_NOT, "SuSE 11.1"); flag = 0; if (rpm_check(release:"SLED11", sp:1, cpu:"i586", reference:"evince-2.28.2-0.3.1")) flag++; if (rpm_check(release:"SLED11", sp:1, cpu:"i586", reference:"evince-lang-2.28.2-0.3.1")) flag++; if (rpm_check(release:"SLED11", sp:1, cpu:"x86_64", reference:"evince-2.28.2-0.3.1")) flag++; if (rpm_check(release:"SLED11", sp:1, cpu:"x86_64", reference:"evince-lang-2.28.2-0.3.1")) flag++; if (rpm_check(release:"SLES11", sp:1, reference:"evince-2.28.2-0.3.1")) flag++; if (rpm_check(release:"SLES11", sp:1, reference:"evince-doc-2.28.2-0.3.1")) flag++; if (rpm_check(release:"SLES11", sp:1, reference:"evince-lang-2.28.2-0.3.1")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family Mandriva Local Security Checks NASL id MANDRIVA_MDVSA-2011-005.NASL description Multiple vulnerabilities has been found and corrected in evince : Array index error in the PK and VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer (CVE-2010-2640, CVE-2010-2641). Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer (CVE-2010-2642). Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer (CVE-2010-2643). The updated packages have been patched to correct these issues. last seen 2020-06-01 modified 2020-06-02 plugin id 51797 published 2011-01-28 reporter This script is Copyright (C) 2011-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/51797 title Mandriva Linux Security Advisory : evince (MDVSA-2011:005) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Mandriva Linux Security Advisory MDVSA-2011:005. # The text itself is copyright (C) Mandriva S.A. # include("compat.inc"); if (description) { script_id(51797); script_version("1.10"); script_cvs_date("Date: 2019/08/02 13:32:53"); script_cve_id("CVE-2010-2640", "CVE-2010-2641", "CVE-2010-2642", "CVE-2010-2643"); script_bugtraq_id(45678); script_xref(name:"MDVSA", value:"2011:005"); script_name(english:"Mandriva Linux Security Advisory : evince (MDVSA-2011:005)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value: "The remote Mandriva Linux host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "Multiple vulnerabilities has been found and corrected in evince : Array index error in the PK and VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer (CVE-2010-2640, CVE-2010-2641). Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer (CVE-2010-2642). Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer (CVE-2010-2643). The updated packages have been patched to correct these issues." ); script_set_attribute(attribute:"solution", value:"Update the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:evince"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64evince-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64evince1"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:lib64evince2"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libevince-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libevince1"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:libevince2"); script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2010.0"); script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2010.1"); script_set_attribute(attribute:"patch_publication_date", value:"2011/01/13"); script_set_attribute(attribute:"plugin_publication_date", value:"2011/01/28"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2011-2019 Tenable Network Security, Inc."); script_family(english:"Mandriva Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/Mandrake/release", "Host/Mandrake/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Mandrake/release")) audit(AUDIT_OS_NOT, "Mandriva / Mandake Linux"); if (!get_kb_item("Host/Mandrake/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu !~ "^(amd64|i[3-6]86|x86_64)$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Mandriva / Mandrake Linux", cpu); flag = 0; if (rpm_check(release:"MDK2010.0", reference:"evince-2.28.1-1.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", cpu:"x86_64", reference:"lib64evince-devel-2.28.1-1.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", cpu:"x86_64", reference:"lib64evince1-2.28.1-1.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", cpu:"i386", reference:"libevince-devel-2.28.1-1.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.0", cpu:"i386", reference:"libevince1-2.28.1-1.1mdv2010.0", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", reference:"evince-2.30.3-1.1mdv2010.2", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", cpu:"x86_64", reference:"lib64evince-devel-2.30.3-1.1mdv2010.2", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", cpu:"x86_64", reference:"lib64evince2-2.30.3-1.1mdv2010.2", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", cpu:"i386", reference:"libevince-devel-2.30.3-1.1mdv2010.2", yank:"mdv")) flag++; if (rpm_check(release:"MDK2010.1", cpu:"i386", reference:"libevince2-2.30.3-1.1mdv2010.2", yank:"mdv")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family Ubuntu Local Security Checks NASL id UBUNTU_USN-1035-1.NASL description Jon Larimer discovered that Evince last seen 2020-06-01 modified 2020-06-02 plugin id 51421 published 2011-01-06 reporter Ubuntu Security Notice (C) 2011-2019 Canonical, Inc. / NASL script (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/51421 title Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : evince vulnerabilities (USN-1035-1) NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2011-0009.NASL description Updated evince packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Evince is a document viewer. An array index error was found in the DeVice Independent (DVI) renderer last seen 2020-06-01 modified 2020-06-02 plugin id 51432 published 2011-01-07 reporter This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/51432 title RHEL 6 : evince (RHSA-2011:0009) NASL family Scientific Linux Local Security Checks NASL id SL_20110106_EVINCE_ON_SL6_X.NASL description An array index error was found in the DeVice Independent (DVI) renderer last seen 2020-06-01 modified 2020-06-02 plugin id 60930 published 2012-08-01 reporter This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/60930 title Scientific Linux Security Update : evince on SL6.x i386/x86_64 NASL family Fedora Local Security Checks NASL id FEDORA_2011-0208.NASL description - Thu Jan 6 2011 Marek Kasik <mkasik at redhat.com> - 2.32.0-3 - Fixes CVE-2010-2640, CVE-2010-2641, CVE-2010-2642 and CVE-2010-2643 - Resolves: #667573 - Mon Nov 22 2010 Marek Kasik <mkasik at redhat.com> - 2.32.0-2 - Fix crash in clear_job_selection() - Remove unused patch - Resolves: #647689 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 51445 published 2011-01-10 reporter This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/51445 title Fedora 14 : evince-2.32.0-3.fc14 (2011-0208) NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-201111-10.NASL description The remote host is affected by the vulnerability described in GLSA-201111-10 (Evince: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Evince. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to load a DVI file with a specially crafted font, resulting in the execution of arbitrary code with the privileges of the user running the application or a Denial of Service. Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 56906 published 2011-11-22 reporter This script is Copyright (C) 2011-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/56906 title GLSA-201111-10 : Evince: Multiple vulnerabilities NASL family SuSE Local Security Checks NASL id SUSE_EVINCE-7309.NASL description Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 / CVE-2010-2641 / CVE-2010-2642 / CVE-2010-2643 have been assigned to these issues. last seen 2020-06-01 modified 2020-06-02 plugin id 51640 published 2011-01-21 reporter This script is Copyright (C) 2011-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/51640 title SuSE 10 Security Update : evince (ZYPP Patch Number 7309) NASL family Debian Local Security Checks NASL id DEBIAN_DSA-2357.NASL description Jon Larimer from IBM X-Force Advanced Research discovered multiple vulnerabilities in the DVI backend of the Evince document viewer : - CVE-2010-2640 Insufficient array bounds checks in the PK fonts parser could lead to function pointer overwrite, causing arbitrary code execution. - CVE-2010-2641 Insufficient array bounds checks in the VF fonts parser could lead to function pointer overwrite, causing arbitrary code execution. - CVE-2010-2642 Insufficient bounds checks in the AFM fonts parser when writing data to a memory buffer allocated on heap could lead to arbitrary memory overwrite and arbitrary code execution. - CVE-2010-2643 Insufficient check on an integer used as a size for memory allocation can lead to arbitrary write outside the allocated range and cause arbitrary code execution. last seen 2020-03-17 modified 2011-12-05 plugin id 56999 published 2011-12-05 reporter This script is Copyright (C) 2011-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/56999 title Debian DSA-2357-1 : evince - several vulnerabilities NASL family Fedora Local Security Checks NASL id FEDORA_2011-0224.NASL description - Thu Jan 6 2011 Marek Kasik <mkasik at redhat.com> - 2.30.3-2 - Fixes CVE-2010-2640, CVE-2010-2641, CVE-2010-2642 and CVE-2010-2643 - Resolves: #667573 - Fri Jun 25 2010 Marek Kasik <mkasik at redhat.com> - 2.30.3-1 - Update to 2.30.3 - Tue Jun 22 2010 Marek Kasik <mkasik at redhat.com> - 2.30.2-1 - Update to 2.30.2 (resolves #587495) - Remove unused patches - Tue Jun 22 2010 Marek Kasik <mkasik at redhat.com> - 2.30.1-3 - Check whether metadata is NULL before using it - Resolves: #597777 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 51465 published 2011-01-12 reporter This script is Copyright (C) 2011-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/51465 title Fedora 13 : evince-2.30.3-2.fc13 (2011-0224) NASL family Oracle Linux Local Security Checks NASL id ORACLELINUX_ELSA-2011-0009.NASL description From Red Hat Security Advisory 2011:0009 : Updated evince packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section. Evince is a document viewer. An array index error was found in the DeVice Independent (DVI) renderer last seen 2020-06-01 modified 2020-06-02 plugin id 68178 published 2013-07-12 reporter This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/68178 title Oracle Linux 6 : evince (ELSA-2011-0009) NASL family SuSE Local Security Checks NASL id SUSE_11_3_EVINCE-110105.NASL description Multiple font parser vulnerabilities in the DVI backend of evince have been fixed. CVE-2010-2640 - CVE-2010-2643 have been assigned to these issues. last seen 2020-06-01 modified 2020-06-02 plugin id 75478 published 2014-06-13 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/75478 title openSUSE Security Update : evince (openSUSE-SU-2011:0045-1)
Redhat
| advisories |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| rpms |
|
References
- http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2
- http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html
- http://lists.mandriva.com/security-announce/2011-01/msg00006.php
- http://lists.mandriva.com/security-announce/2011-01/msg00006.php
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
- http://secunia.com/advisories/42769
- http://secunia.com/advisories/42769
- http://secunia.com/advisories/42821
- http://secunia.com/advisories/42821
- http://secunia.com/advisories/42847
- http://secunia.com/advisories/42847
- http://secunia.com/advisories/42872
- http://secunia.com/advisories/42872
- http://secunia.com/advisories/43068
- http://secunia.com/advisories/43068
- http://www.debian.org/security/2011/dsa-2357
- http://www.debian.org/security/2011/dsa-2357
- http://www.redhat.com/support/errata/RHSA-2011-0009.html
- http://www.redhat.com/support/errata/RHSA-2011-0009.html
- http://www.securityfocus.com/bid/45678
- http://www.securityfocus.com/bid/45678
- http://www.securitytracker.com/id?1024937
- http://www.securitytracker.com/id?1024937
- http://www.ubuntu.com/usn/USN-1035-1
- http://www.ubuntu.com/usn/USN-1035-1
- http://www.vupen.com/english/advisories/2011/0029
- http://www.vupen.com/english/advisories/2011/0029
- http://www.vupen.com/english/advisories/2011/0043
- http://www.vupen.com/english/advisories/2011/0043
- http://www.vupen.com/english/advisories/2011/0056
- http://www.vupen.com/english/advisories/2011/0056
- http://www.vupen.com/english/advisories/2011/0097
- http://www.vupen.com/english/advisories/2011/0097
- http://www.vupen.com/english/advisories/2011/0102
- http://www.vupen.com/english/advisories/2011/0102
- http://www.vupen.com/english/advisories/2011/0212
- http://www.vupen.com/english/advisories/2011/0212
- https://bugzilla.redhat.com/show_bug.cgi?id=666321
- https://bugzilla.redhat.com/show_bug.cgi?id=666321