7.6

CVE-2010-2643

Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

Data is provided by the National Vulnerability Database (NVD)
Redhat ≫ Evince Version0.1
Redhat ≫ Evince Version0.2
Redhat ≫ Evince Version0.3
Redhat ≫ Evince Version0.4
Redhat ≫ Evince Version0.5
Redhat ≫ Evince Version0.6
Redhat ≫ Evince Version0.7
Redhat ≫ Evince Version0.8
Redhat ≫ Evince Version0.9
Redhat ≫ Evince Version2.19
Redhat ≫ Evince Version2.20
Redhat ≫ Evince Version2.21
Redhat ≫ Evince Version2.22
Redhat ≫ Evince Version2.23
Redhat ≫ Evince Version2.24
Redhat ≫ Evince Version2.25
Redhat ≫ Evince Version2.26
Redhat ≫ Evince Version2.27
Redhat ≫ Evince Version2.28
Redhat ≫ Evince Version2.29
Redhat ≫ Evince Version2.29.92
Redhat ≫ Evince Version2.30
Redhat ≫ Evince Version2.30.2
Redhat ≫ Evince Version2.30.3
Redhat ≫ Evince Version2.31
Redhat ≫ Evince Version2.31.1
Redhat ≫ Evince Version2.31.2
Redhat ≫ Evince Version2.31.4
Redhat ≫ Evince Version2.31.4.1
Redhat ≫ Evince Version2.31.6
Redhat ≫ Evince Version2.31.6.1
Redhat ≫ Evince Version2.31.90
Redhat ≫ Evince Version2.31.92
Redhat ≫ Evince Version2.32
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 7.84% 0.916
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.6 4.9 10
AV:N/AC:H/Au:N/C:C/I:C/A:C