PT-2026-42169

Name of the Vulnerable Software and Affected Versions Atril versions prior to 1.26.3 Atril versions prior to 1.28.4 Evince versions prior to 48.4 Xreader versions prior to 4.6.4 Xreader versions prior to 3.6.7 Papers affected versions not specified Description A command injection issue exists in...

MiracleLinux 7 : evince-3.28.2-10.el7, poppler-0.26.5-43.el7 (AXSA:2020-698:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-698:01 advisory. poppler: divide-by-zero in function SplashOutputDev::tilingPatternFill in SplashOutputDev.cc CVE-2019-14494 Tenable has extracted the preceding description...

MiracleLinux 8 : evince-3.28.4-11.el8, poppler-20.11.0-2.el8 (AXSA:2021-2105:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-2105:01 advisory. poppler: pdftohtml: access to uninitialized pointer could lead to DoS CVE-2020-27778 Tenable has extracted the preceding description block directly from the...

Moderate: Red Hat Security Advisory: poppler security update

An update for poppler is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

MiracleLinux 7 : evince-3.28.2-9.el7poppler-0.26.5-42.el7 (AXSA:2020-4565:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-4565:01 advisory. poppler: integer overflow in Parser::makeStream in Parser.cc CVE-2018-21009 poppler: heap-based buffer over-read in function...

MiracleLinux 7 : evince-3.22.1-5.2.el7 (AXSA:2017-2116:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2116:01 advisory. Evince is simple multi-page document viewer. It can display and print Portable Document Format PDF, PostScript PS and Encapsulated PostScript EPS files. When...

MiracleLinux 7 : poppler-0.26.5-38.el7, evince-3.28.2-8.el7, okular-4.10.5-7.el7 (AXSA:2019-4277:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-4277:01 advisory. poppler: heap-based buffer over-read in XRef::getEntry in XRef.cc CVE-2019-7310 poppler: heap-based buffer overflow in function ImageStream::getLine...

EUVD-2010-2645

Malware in sbrugna...

EUVD-2010-2647

Malware in sbrugna...

EUVD-2017-1444

Malware in sbrugna...

EUVD-2010-2644

Malware in sbrugna...

EUVD-2017-18022

Malware in sbrugna...

EUVD-2013-3651

Malware in sbrugna...

EUVD-2019-3132

Malware in sbrugna...

Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.

...

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

...

Linux Distros Unpatched Vulnerability : CVE-2019-11459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tiffdocumentrender and tiffdocumentgetthumbnail functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from...

Linux Distros Unpatched Vulnerability : CVE-2019-1010006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is...

Moderate: Red Hat Security Advisory: poppler security update

An update for poppler is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

ALSA-2024:9167 Moderate: poppler security update

Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: pdfinfo: crash in broken documents when using -dests parameter CVE-2024-6239 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...