CVE-2010-2640

Related Files

Debian Security Advisory 2357-1

Posted Dec 4, 2011

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2357-1 - Jon Larimer from IBM X-Force Advanced Research discovered multiple vulnerabilities in the DVI backend of the evince document viewer.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2010-2640, CVE-2010-2641, CVE-2010-2642, CVE-2010-264320

SHA-256 | 088bf1eb17fbe3e4dd8c9598fa2c61f2c3610609affe9540961885e186473e9e

Download | Favorite | View

Gentoo Linux Security Advisory 201111-10

Posted Nov 21, 2011

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201111-10 - Multiple vulnerabilities have been found in Evince, allowing remote attackers to execute arbitrary code or cause a Denial of Service. Versions less than 2.32.0-r2 are affected.

tags | advisory, remote, denial of service, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2010-2640, CVE-2010-2641, CVE-2010-2642, CVE-2010-2643

SHA-256 | 2d3af8e84dc45555188f97e7435cca181f767d116ac5c712ff3fc84b51a2268f

Download | Favorite | View

Mandriva Linux Security Advisory 2011-005

Posted Jan 14, 2011

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2011-005 - Array index error in the PK and VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer. Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer. Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer. The updated packages have been patched to correct these issues.

tags | advisory, remote, denial of service, overflow, arbitrary

systems | linux, mandriva

advisories | CVE-2010-2640, CVE-2010-2641, CVE-2010-2642, CVE-2010-2643

SHA-256 | 8a323bca36e45ebc77d98eb8446f88075869ded4422a4035e079a4b5a1b2786e

Download | Favorite | View

Ubuntu Security Notice USN-1035-1

Posted Jan 6, 2011

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1035-1 - Jon Larimer discovered that Evince's font parsers incorrectly handled certain buffer lengths when rendering a DVI file. By tricking a user into opening or previewing a DVI file that uses a specially crafted font file, an attacker could crash evince or execute arbitrary code with the user's privileges. In the default installation of Ubuntu 9.10 and later, attackers would be isolated by the Evince AppArmor profile.

tags | advisory, arbitrary

systems | linux, ubuntu

advisories | CVE-2010-2640, CVE-2010-2641, CVE-2010-2642, CVE-2010-2643

SHA-256 | e5d2935cdc580c2e43717bbc25c563ae6f614f3b797b3502ef719be947711347

Download | Favorite | View