CVE-2010-2642
Fixed in a distro release EPSS 14%
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Products: redhat evince, t1lib, tug tetex
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | evince | 3.0.2-1 |
| Debian 13 | evince | 3.0.2-1 |
| Debian 5.0 | evince | 2.22.2-4~lenny2 |
| Debian 5.0 | t1lib | 5.1.2-3+lenny1 |
| Debian 6.0 | t1lib | 5.1.2-3+squeeze1 |
| Red Hat Enterprise Linux 5 | tetex | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-afm | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-debuginfo | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-doc | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-dvips | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-fonts | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-latex | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-xdvi | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 6 | evince | 0:2.28.2-14.el6_0.1 |
| Red Hat Enterprise Linux 6 | evince-debuginfo | 0:2.28.2-14.el6_0.1 |
| Red Hat Enterprise Linux 6 | evince-devel | 0:2.28.2-14.el6_0.1 |
| Red Hat Enterprise Linux 6 | evince-dvi | 0:2.28.2-14.el6_0.1 |
| Red Hat Enterprise Linux 6 | evince-libs | 0:2.28.2-14.el6_0.1 |
| Red Hat Enterprise Linux 6 | kpathsea | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | kpathsea-devel | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | mendexk | 0:2.6e-57.el6_2 |
| Red Hat Enterprise Linux 6 | t1lib | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-apps | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-debuginfo | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-devel | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-static | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | texlive | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-afm | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-context | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-debuginfo | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-dvips | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-dviutils | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-east-asian | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-latex | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-utils | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-xetex | 0:2007-57.el6_2 |
| openSUSE Tumbleweed | evince | 3.22.1-1.1 |