evince

14 results · Feed

• High 8.4
  CVE-2026-46529 Public exploit

  PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

  Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A single-click remote code execution vulnerability in versions prior to 1.26.3 and 1.28.4 allows an attacker to achieve arbitrary code execution as the user by tri…

  mate-desktop atril evince atril Debian Ubuntu Alpine
  Jun 10, 2026
• Critical 9.6
  CVE-2023-51698

  Atril's CBT comic book parsing vulnerable to Remote Code Execution

  Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted l…

  mate-desktop atril evince atril Debian Ubuntu
  Jan 12, 2024
• Unscored —
  CVE-2013-3718

  evince is missing a check on number of pages which can lead to a segmentation fault

  evince Debian
  Nov 1, 2019
• Unscored —
  CVE-2019-1010006

  Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/t…

  Evince Team Evince evince atril Debian Ubuntu
  Jul 15, 2019
• Unscored —
  CVE-2019-11459

  The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince thr…

  evince atril atril evince Debian Ubuntu Alpine
  Apr 22, 2019
• Unscored —
  CVE-2017-1000159

  Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.

  evince atril atril evince Debian Ubuntu
  Nov 27, 2017
• Unscored —
  CVE-2017-1000083 Public exploit EPSS 51%

  backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to …

  evince atril atril evince Debian Ubuntu Alpine
  Sep 5, 2017
• Unscored —
  CVE-2011-0433

  Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and …

  evince Debian
  Nov 19, 2012
• Unscored —
  CVE-2011-5244

  Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as…

  evince Debian
  Nov 19, 2012
• Unscored —
  CVE-2010-2641

  Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers…

  evince Debian
  Jan 7, 2011
• Unscored —
  CVE-2010-2643

  Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers…

  evince Debian
  Jan 7, 2011
• Unscored —
  CVE-2010-2642 EPSS 14%

  Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t…

  evince Debian
  Jan 7, 2011
• Unscored —
  CVE-2010-2640

  Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers…

  evince Debian
  Jan 7, 2011
• Unscored —
  CVE-2006-5864 Public exploit EPSS 16%

  Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows …

  evince gv Debian
  Nov 11, 2006