Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-2642

Опубликовано: 07 янв. 2011
Источник: nvd
CVSS2: 7.6
EPSS Средний

Описание

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:evince:*:*:*:*:*:*:*:*
Версия до 2.32 (включая)
cpe:2.3:a:redhat:evince:0.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:0.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:0.3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:0.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:0.5:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:0.6:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:0.7:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:0.8:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:0.9:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.19:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.20:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.21:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.22:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.23:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.24:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.25:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.26:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.27:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.28:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.29:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.29.92:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.30:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.30.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.30.3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.31:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.31.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.31.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.31.4:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.31.4.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.31.6:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.31.6.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.31.90:*:*:*:*:*:*:*
cpe:2.3:a:redhat:evince:2.31.92:*:*:*:*:*:*:*
cpe:2.3:a:t1lib:t1lib:5.1.2:*:*:*:*:*:*:*
cpe:2.3:a:tug:tetex:3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 94%
0.12564
Средний

7.6 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 15 лет назад

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

redhat
почти 15 лет назад

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

msrc
около 1 месяца назад

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

debian
почти 15 лет назад

Heap-based buffer overflow in the AFM font parser in the dvi-backend c ...

github
больше 3 лет назад

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

EPSS

Процентиль: 94%
0.12564
Средний

7.6 High

CVSS2

Дефекты

CWE-119