CVE-2010-2643
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier...
CVE-2010-2643 is a high vulnerability (CVSS 7.6) in Redhat Evince, published January 7, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.99%, the 93rd percentile. Fixed in evince 2.30.3-2.
- Severity
- 7.6 HighCVSS 2.0, NVD
- Exploit chance
- 5.99%EPSS, 93rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.30.3-2evince +23 more
Description
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
evinceDebian:12 | before 2.30.3-2 | 2.30.3-2 |
evinceDebian:13 | before 2.30.3-2 | 2.30.3-2 |
evinceDebian:5.0 From an advisory covering 5 CVEs | before 2.22.2-4~lenny2, plus listed versions 2.22.2-4~lenny1 | 2.22.2-4~lenny2 |
evinceRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-develRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-dviRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-libsRed Hat:enterprise_linux:6::client From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evinceRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
evince-develRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-dviRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evinceRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-develRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-dviRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-libsRed Hat:enterprise_linux:6::server From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evinceRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-develRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-dviRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 4 CVEs | before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evinceopenSUSE:Tumbleweed From an advisory covering 4 CVEs | before 3.22.1-1.1 | 3.22.1-1.1 |
What each source reports
NVD Score used
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
CVE-2010-2643- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE ListNo score
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
CVE-2010-2643- Updated
- 2026-11-02
EUVDEUVD-2010-2647No score
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
EUVD-2010-2647- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pgxj-rq3f-m3h9No score
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier...
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
GHSA-pgxj-rq3f-m3h9- Updated
- 2026-11-02
OSVNo score
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
CVE-2010-2643- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2643No score
Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
DEBIAN-CVE-2010-2643- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10041-1No score
evince-3.22.1-1.1 on GA media
These are all security issues fixed in the evince-3.22.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10041-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/43068
lists.mandriva.com/security-announce/2011-01/msg00006.php
bugzilla.redhat.com/show_bug.cgi?id=666321
vupen.com/english/advisories/2011/0212
Show 40 moreShow less
lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html
debian.org/security/2011/dsa-2357
ubuntu.com/usn/USN-1035-1
lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
redhat.com/support/errata/RHSA-2011-0009.html
git.gnome.org/browse/evince/commit?id=d4139205b010ed06310d14284e63114e88ec6de2
securitytracker.com/id?1024937
securityfocus.com/bid/45678
nvd.nist.gov/vuln/detail/CVE-2010-2643
github.com/advisories/GHSA-pgxj-rq3f-m3h9
security-tracker.debian.org/tracker/CVE-2010-2643
access.redhat.com/errata/RHSA-2011:0009
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0009.json
cve.org/CVERecord?id=CVE-2010-2640
suse.com/security/cve/CVE-2010-2640