NetSight
IP …
high7.6

CVE-2010-2640

Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (applicati…

Impact

Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

Affected products

VendorProductAffected versions
RedhatEvince
through 2.32
Versions 0.1, 0.2, 0.3, 0.4, 0.5

Weakness classification

CWE-20

References