Red Hat Evince vulnerabilities

4 CVEs affecting Red Hat Evince, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-2643, published 2011-01-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2010-2642, published 2011-01-07. High severity, CVSS 7.6. EPSS: 14.3% chance of exploitation in the next 30 days. Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a…
CVE-2010-2643, published 2011-01-07. High severity, CVSS 7.6. EPSS: 6% chance of exploitation in the next 30 days. Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file…
CVE-2010-2641, published 2011-01-07. High severity, CVSS 7.6. EPSS: 4.9% chance of exploitation in the next 30 days. Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary…
CVE-2010-2640, published 2011-01-07. High severity, CVSS 7.6. EPSS: 4.9% chance of exploitation in the next 30 days. Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary…