CVE-2010-2642
NoneCVSS
—
EPSS
14.3%
Published
Jan 7, 2011
CISA due date
—
The record
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | evince | 0 | 3.0.2-1 |
| Debian:12 | evince | 0 | 3.0.2-1 |
| Debian:13 | evince | 0 | 3.0.2-1 |
| Debian:5.0 | evince | 0 | 2.22.2-4~lenny2 |
| Debian:5.0 | t1lib | 0 | 5.1.2-3+lenny1 |
| Debian:6.0 | t1lib | 0 | 5.1.2-3+squeeze1 |
| Red Hat:enterprise_linux:5::client | tetex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-afm | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-debuginfo | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-doc | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-dvips | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-fonts | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-latex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-xdvi | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-afm | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-debuginfo | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-doc | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-dvips | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-fonts | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-latex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-xdvi | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:6::client | evince | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::client | evince-debuginfo | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::client | evince-devel | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::client | evince-dvi | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::client | evince-libs | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::client | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::client | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-xetex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | evince | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | evince-debuginfo | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | evince-devel | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | evince-dvi | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | evince-libs | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-xetex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | evince | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::server | evince-debuginfo | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::server | evince-devel | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::server | evince-dvi | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::server | evince-libs | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::server | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::server | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-xetex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | evince | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | evince-debuginfo | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | evince-devel | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | evince-dvi | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | evince-libs | 0 | 0:2.28.2-14.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-xetex | 0 | 0:2007-57.el6_2 |
| openSUSE:Tumbleweed | evince | 0 | 3.22.1-1.1 |
Related vulnerabilities
- CVE-2017-1000159 Command injection in evince via filename when printing to PDF. Also affects evince
- CVE-2017-1000083 backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before… Also affects evince
- CVE-2006-5864 Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and… Also affects evince
- CVE-2011-1552 t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads… Also affects t1lib
- CVE-2011-0764 t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses… Also affects t1lib
- CVE-2009-3608 Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before… Also affects tetex
- CVE-2007-4033 Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib… Also affects tetex
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119