UbuntuUSN-390-3evince-gtk vulnerability
7.5 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.923 High
EPSS
Percentile
98.9%
Releases
- Ubuntu 6.10
- Ubuntu 6.06
Details
USN-390-2 fixed vulnerabilities in evince. This update provides the
corresponding update for evince-gtk.
Original advisory details:
A buffer overflow was discovered in the PostScript processor included
in evince. By tricking a user into opening a specially crafted PS
file, an attacker could crash evince or execute arbitrary code with
the user’s privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 6.10 | noarch | evince-gtk | < 0.5.2-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 6.06 | noarch | evince-gtk | < 0.5.2-0ubuntu2.1 | UNKNOWN |
References
Related
7.5 High
AI Score
Confidence
Low
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.923 High
EPSS
Percentile
98.9%