CVEvulnerability

CVE-2010-2641

7.6 HIGH Published 2011-01-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-01-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

Affected configurations

• redhat evince (<= 2.32) • redhat evince 0.1 • redhat evince 0.2 • redhat evince 0.3 • redhat evince 0.4 • redhat evince 0.5 • redhat evince 0.6 • redhat evince 0.7 • redhat evince 0.8 • redhat evince 0.9 • redhat evince 2.19 • redhat evince 2.20 • redhat evince 2.21 • redhat evince 2.22 • redhat evince 2.23 • redhat evince 2.24 • redhat evince 2.25 • redhat evince 2.26 • redhat evince 2.27 • redhat evince 2.28 • redhat evince 2.29 • redhat evince 2.29.92 • redhat evince 2.30 • redhat evince 2.30.2 • redhat evince 2.30.3 • redhat evince 2.31 • redhat evince 2.31.1 • redhat evince 2.31.2 • redhat evince 2.31.4 • redhat evince 2.31.4.1 • redhat evince 2.31.6 • redhat evince 2.31.6.1 • redhat evince 2.31.90 • redhat evince 2.31.92

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References