CVE-2010-2642

CVE-2010-2642 describes a heap-based buffer overflow in the AFM font parser of the dvi-backend used by Evince (2.32 and earlier), teTeX 3.0, and t1lib 5.1.2, among others. The vulnerability is triggered by a crafted font in a DVI file processed by the thumbnailer, potentially resulting in a denia...

CVE-2010-2643

CVE-2010-2643 affects Evince (DVI backend) prior to 2.33.x, due to an integer overflow in the TFM font parser. A crafted font within a DVI file processed by the thumbnailer can enable remote code execution. The description in connected sources confirms the vulnerability class and affected compone...

CVE-2010-2640

CVE-2010-2640 affects Evince (DVI backend) and its font parsers. An array index error in the DeVice Independent (DVI) PK font parser can cause Evince to crash or, potentially, allow arbitrary code execution when processing a crafted font via a DVI file in the thumbnailer. The advisory also covers...

CVE-2010-2641

CVE-2010-2641 affects Evince’s DVI backend, specifically the DeVice Independent (DVI) font parser for VF fonts. The root cause is an array index error in the VF font parser, triggered by a crafted font referenced by a DVI file, which could crash Evince or potentially allow arbitrary code executio...