Lucene search

K
freebsdFreeBSD779A2D55-8BA8-11DB-81D5-00123FFE8333
HistoryNov 27, 2006 - 12:00 a.m.

evince -- Buffer Overflow Vulnerability

2006-11-2700:00:00
vuxml.freebsd.org
11

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.923 High

EPSS

Percentile

98.9%

Secunia reports:

A vulnerability has been discovered in Evince, which can be
exploited by malicious people to compromise a user’s system.
The vulnerability is caused due to a boundary error within the
“get_next_text()” function in ps/ps.c. This can be exploited to
cause a buffer overflow by e.g. tricking a user into opening a
specially crafted PostScript file.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchevince< 0.6.1_1UNKNOWN

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.923 High

EPSS

Percentile

98.9%