National Cyber Awareness System

Vulnerability Summary for CVE-2010-2642

Overview

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://bugzilla.redhat.com/show_bug.cgi?id=666318

Type: Patch Information

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=666318

External Source: CONFIRM

Name: http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2

Type: Patch Information

Hyperlink:http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2

External Source: VUPEN

Name: ADV-2011-0194

Hyperlink:http://www.vupen.com/english/advisories/2011/0194

External Source: VUPEN

Name: ADV-2011-0193

Hyperlink:http://www.vupen.com/english/advisories/2011/0193

External Source: VUPEN

Name: ADV-2011-0102

Hyperlink:http://www.vupen.com/english/advisories/2011/0102

External Source: VUPEN

Name: ADV-2011-0097

Hyperlink:http://www.vupen.com/english/advisories/2011/0097

External Source: VUPEN

Name: ADV-2011-0056

Hyperlink:http://www.vupen.com/english/advisories/2011/0056

External Source: VUPEN

Name: ADV-2011-0043

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0043

External Source: VUPEN

Name: ADV-2011-0029

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2011/0029

External Source: UBUNTU

Name: USN-1035-1

Hyperlink:http://www.ubuntu.com/usn/USN-1035-1

External Source: SECTRACK

Name: 1024937

Hyperlink:http://www.securitytracker.com/id?1024937

External Source: BID

Name: 45678

Hyperlink:http://www.securityfocus.com/bid/45678

External Source: REDHAT

Name: RHSA-2011:0009

Hyperlink:http://www.redhat.com/support/errata/RHSA-2011-0009.html

External Source: MANDRIVA

Name: MDVSA-2012:144

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2012:144

External Source: MANDRIVA

Name: MDVSA-2011:017

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:017

External Source: MANDRIVA

Name: MDVSA-2011:016

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2011:016

External Source: DEBIAN

Name: DSA-2357

Hyperlink:http://www.debian.org/security/2011/dsa-2357

External Source: SECUNIA

Name: 42872

Hyperlink:http://secunia.com/advisories/42872

External Source: SECUNIA

Name: 42847

Type: Advisory

Hyperlink:http://secunia.com/advisories/42847

External Source: SECUNIA

Name: 42821

Type: Advisory

Hyperlink:http://secunia.com/advisories/42821

External Source: SECUNIA

Name: 42769

Type: Advisory

Hyperlink:http://secunia.com/advisories/42769

External Source: REDHAT

Name: RHSA-2012:1201

Hyperlink:http://rhn.redhat.com/errata/RHSA-2012-1201.html

External Source: MANDRIVA

Name: MDVSA-2011:005

Hyperlink:http://lists.mandriva.com/security-announce/2011-01/msg00006.php

External Source: FEDORA

Name: FEDORA-2011-0224

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html

External Source: FEDORA

Name: FEDORA-2011-0208

Hyperlink:http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html