Skip to content
OpenAdvisories
Unscored DSA-2357-1 5 CVEs

evince - several

Published Dec 3, 2011 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 evince 2.22.2-4~lenny2

Vulnerabilities 5

  • Unscored —

    Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers…

  • Unscored —

    Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers…

  • Unscored —
    CVE-2010-2642 EPSS 14%

    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t…

  • Unscored —

    Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers…

  • Unscored —

    Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as…