CVE-2010-2640
Fixed in a distro release EPSS 5%
Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Products: redhat evince
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | evince | 2.30.3-2 |
| Debian 13 | evince | 2.30.3-2 |
| Debian 5.0 | evince | 2.22.2-4~lenny2 |
| Red Hat Enterprise Linux 6 | evince | 0:2.28.2-14.el6_0.1 |
| Red Hat Enterprise Linux 6 | evince-debuginfo | 0:2.28.2-14.el6_0.1 |
| Red Hat Enterprise Linux 6 | evince-devel | 0:2.28.2-14.el6_0.1 |
| Red Hat Enterprise Linux 6 | evince-dvi | 0:2.28.2-14.el6_0.1 |
| Red Hat Enterprise Linux 6 | evince-libs | 0:2.28.2-14.el6_0.1 |
| openSUSE Tumbleweed | evince | 3.22.1-1.1 |