691 matches found
EUVD-2017-18022
Malware in sbrugna...
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
...
Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.
...
Linux Distros Unpatched Vulnerability : CVE-2019-11459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from...
Linux Distros Unpatched Vulnerability : CVE-2019-1010006
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is...
Moderate: Red Hat Security Advisory: poppler security update
An update for poppler is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
ALSA-2024:9167 Moderate: poppler security update
Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: pdfinfo: crash in broken documents when using -dests parameter CVE-2024-6239 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...
RHSA-2021:1881 Red Hat Security Advisory: poppler and evince security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2020:3977 Red Hat Security Advisory: evince and poppler security and bug fix update
Bulletin has no description...
RHSA-2020:1074 Red Hat Security Advisory: poppler and evince security update
Bulletin has no description...
RHSA-2017:2388 Red Hat Security Advisory: evince security update
Bulletin has no description...
RHSA-2011:0009 Red Hat Security Advisory: evince security update
Bulletin has no description...
Moderate: Red Hat Security Advisory: poppler security update
An update for poppler is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
OPENSUSE-SU-2024:10041-1 evince-3.22.1-1.1 on GA media
These are all security issues fixed in the evince-3.22.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10742-1 evince-40.4-1.3 on GA media
These are all security issues fixed in the evince-40.4-1.3 package on the GA media of openSUSE Tumbleweed...
RHEL 6 : evince (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - evince: Command injection when exporting to PDF CVE-2017-1000159 - poppler 0.54.0, as used in Evince and...
RHEL 5 : evince (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - poppler: Null pointer dereference in the JPXStream::readUByte function CVE-2017-9083 - evince is missing ...
RHEL 7 : evince (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - evince: Command injection when exporting to PDF CVE-2017-1000159 - poppler 0.54.0, as used in Evince and...
RHEL 8 : poppler (RHSA-2024:2979)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:2979 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: NULL pointer dereference i...
Moderate: Red Hat Security Advisory: poppler security update
An update for poppler is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...