EV
Product
Evince
7
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Evince to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1010006 | 7.8 | Jul 15 | Evince 3.26.0 is affected by buffer overflow Affected: 3.26.0 |
| CVE-2017-1000159 | 7.8 | Nov 27 | Command injection in evince via filename when printing to PDF Affected: before 3.25.91 |
| CVE-2017-1000083 | 7.8 | Sep 5 | backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR… Affected: through 3.24.0 |
| CVE-2013-3718 | 5.5 | Nov 1 | evince is missing a check on number of pages which can lead to a segmentation fault Affected: 3.8.2; 3.9.2 |
| CVE-2019-11459 | 5.5 | Apr 22 | The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from… Affected: through 3.32.0 |
| CVE-2011-5244 | – | Nov 19 | Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other… Affected: All versions, or not specified |
| CVE-2011-0433 | – | Nov 19 | Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a… Affected: All versions, or not specified |
Showing 7