Evince vulnerability

2012-01-2500:00:00

ubuntu.com

6.7 Medium

AI Score

Confidence

Low

0.044 Low

EPSS

Percentile

92.4%

JSON

Releases

Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

evince - Document viewer

Details

It was discovered that Evince did not properly parse AFM font files when
processing DVI files. If a user were tricked into opening a specially
crafted DVI file, an attacker could cause Evince to crash or potentially
execute arbitrary code with the privileges of the user invoking the
program.

In the default installation, attackers would be isolated by the Evince
AppArmor profile.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.04noarchlibevdocument3< 2.32.0-0ubuntu12.4UNKNOWN
Ubuntu11.04noarchevince< 2.32.0-0ubuntu12.4UNKNOWN
Ubuntu11.04noarchevince-dbg< 2.32.0-0ubuntu12.4UNKNOWN
Ubuntu11.04noarchevince-gtk< 2.32.0-0ubuntu12.4UNKNOWN
Ubuntu11.04noarchgir1.2-evince-2.32< 2.32.0-0ubuntu12.4UNKNOWN
Ubuntu11.04noarchlibevdocument-dev< 2.32.0-0ubuntu12.4UNKNOWN
Ubuntu11.04noarchlibevview-dev< 2.32.0-0ubuntu12.4UNKNOWN
Ubuntu11.04noarchlibevview3< 2.32.0-0ubuntu12.4UNKNOWN
Ubuntu10.10noarchlibevdocument3< 2.32.0-0ubuntu1.2UNKNOWN
Ubuntu10.10noarchevince< 2.32.0-0ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.04	noarch	libevdocument3	< 2.32.0-0ubuntu12.4	UNKNOWN
Ubuntu	11.04	noarch	evince	< 2.32.0-0ubuntu12.4	UNKNOWN
Ubuntu	11.04	noarch	evince-dbg	< 2.32.0-0ubuntu12.4	UNKNOWN
Ubuntu	11.04	noarch	evince-gtk	< 2.32.0-0ubuntu12.4	UNKNOWN
Ubuntu	11.04	noarch	gir1.2-evince-2.32	< 2.32.0-0ubuntu12.4	UNKNOWN
Ubuntu	11.04	noarch	libevdocument-dev	< 2.32.0-0ubuntu12.4	UNKNOWN
Ubuntu	11.04	noarch	libevview-dev	< 2.32.0-0ubuntu12.4	UNKNOWN
Ubuntu	11.04	noarch	libevview3	< 2.32.0-0ubuntu12.4	UNKNOWN
Ubuntu	10.10	noarch	libevdocument3	< 2.32.0-0ubuntu1.2	UNKNOWN
Ubuntu	10.10	noarch	evince	< 2.32.0-0ubuntu1.2	UNKNOWN