| Package | Affected versions | Patched versions |
|---|---|---|
| evince | = 0.1= 0.2= 0.3= 0.4= 0.5= 0.6= 0.7= 0.8= 0.9= 2.19= 2.20= 2.21= 2.22= 2.23= 2.24= 2.25= 2.26= 2.27= 2.28= 2.29= 2.29.92= 2.30= 2.30.2= 2.30.3= 2.31= 2.31.1= 2.31.2= 2.31.4= 2.31.4.1= 2.31.6= 2.31.6.1= 2.31.90= 2.31.92≤ 2.32 | |
| t1lib | = 5.1.2 | |
| tetex | = 3.0 |
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free