CVE-2019-11459

The CVE-2019-11459 entry affects the Evince TIFF backend. The root cause is that tiff_document_render() and tiff_document_get_thumbnail() did not properly handle errors returned by TIFFReadRGBAImageOriented(), which can lead to disclosure of uninitialized memory when processing certain TIFF image...

CVE-2019-1010006

CVE-2019-1010006 affects Evince 3.26.0, with a buffer overflow in the TIFF document backend (backend/tiff/tiff-document.c). The issue arises from an insufficient integer overflow protection in tiff_document_render and tiff_document_get_thumbnail, and the attack vector requires the victim to open ...

CVE-2017-1000083

CVE-2017-1000083 affects GNOME Evince before 3.24.1. It allows command execution via .cbt files that are TAR archives containing a filename starting with a -- option, demonstrated by a --checkpoint-action=exec=bash at the start of the filename. The issue is triggered when opening CBT archives in ...

CVE-2011-0433

CVE-2011-0433 is a heap-based buffer overflow in the linetoken function of afmparse.c within t1lib, impacting teTeX 3.0.x and GNOME Evince (and possibly others). An attacker could cause a crash or execute arbitrary code by processing a DVI file containing a crafted AFM file. The issue is part of ...

CVE-2011-5244

CVE-2011-5244 describes multiple off-by-one errors in t1lib's AFM parser (backend/dvi/mdvi-lib/afmparse.c), specifically in the token and linetoken functions, which are used by teTeX 3.0.x and GNOME Evince among others. The vulnerability allows remote attackers to crash a DVI reader and potential...

CVE-2017-1000159

CVE-2017-1000159 is a command-injection vulnerability in the DVI exporter of Evince (GNOME) that can be triggered when printing/exporting to PDF by supplying a crafted filename. Affected products: Evince (GNOME document viewer); vulnerable component: DVI exporter invoked during DVI→PDF workflow. ...

CVE-2013-3718

CVE-2013-3718 affects the Evince document viewer. The root cause described across connected sources is a missing check on the number of pages, which can lead to a segmentation fault. Public references note this vulnerability across multiple distributions (Red Hat, SUSE, Debian, Ubuntu, etc.). The...