Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-2640
HistoryJan 05, 2011 - 12:00 a.m.

CVE-2010-2640

2011-01-0500:00:00
ubuntu.com
ubuntu.com
16

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.062 Low

EPSS

Percentile

93.6%

Array index error in the PK font parser in the dvi-backend component in
Evince 2.32 and earlier allows remote attackers to cause a denial of
service (application crash) or possibly execute arbitrary code via a
crafted font in conjunction with a DVI file that is processed by the
thumbnailer.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchevince< 2.22.2-0ubuntu2.1UNKNOWN
ubuntu9.10noarchevince< 2.28.1-0ubuntu1.3UNKNOWN
ubuntu10.04noarchevince< 2.30.3-0ubuntu1.2UNKNOWN
ubuntu10.10noarchevince< 2.32.0-0ubuntu1.1UNKNOWN

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.062 Low

EPSS

Percentile

93.6%