CVE-2010-2642
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and...
CVE-2010-2642 is a high vulnerability (CVSS 7.6) in Redhat Evince, published January 7, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.3%, the 96th percentile. Fixed in evince 3.0.2-1.
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
CVE-2010-2642- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
CVE-2010-2642- Updated
- 2026-11-02
EUVDEUVD-2010-2646 No score
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
EUVD-2010-2646- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3p5c-p75q-mfgv No score
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and...
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
GHSA-3p5c-p75q-mfgv- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVAZL-37047 No score
CVE-2010-2642 affecting package t1lib 5.1.2-29
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
AZL-37047- Updated
- 2026-11-02
OSVAZL-7376 No score
CVE-2010-2642 affecting package t1lib 5.1.2-28
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
AZL-7376- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
CVE-2010-2642- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-2642 No score
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- Record
DEBIAN-CVE-2010-2642- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10041-1 No score
evince-3.22.1-1.1 on GA media
These are all security issues fixed in the evince-3.22.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10041-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
t1libAzure Linux:3 |
through 5.1.2-29 | None known |
t1libAzure Linux:2 |
through 5.1.2-28 | None known |
evinceDebian:12 |
before 3.0.2-1 | 3.0.2-1 |
evinceDebian:13 |
before 3.0.2-1 | 3.0.2-1 |
evinceDebian:5.0 |
before 2.22.2-4~lenny2, plus listed versions 2.22.2-4~lenny1 |
2.22.2-4~lenny2 |
t1libDebian:6.0 |
before 5.1.2-3+squeeze1, plus listed versions 5.1.2-35.1.2-3+lenny1 |
5.1.2-3+squeeze1 |
t1libDebian:5.0 |
before 5.1.2-3+lenny1, plus listed versions 5.1.2-3 |
5.1.2-3+lenny1 |
evinceRed Hat:enterprise_linux:6::client |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-develRed Hat:enterprise_linux:6::client |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
Show 106 moreShow less
| Package | Affected | Fixed |
|---|---|---|
evince-dviRed Hat:enterprise_linux:6::client |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-libsRed Hat:enterprise_linux:6::client |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evinceRed Hat:enterprise_linux:6::computenode |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-develRed Hat:enterprise_linux:6::computenode |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-dviRed Hat:enterprise_linux:6::computenode |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-libsRed Hat:enterprise_linux:6::computenode |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evinceRed Hat:enterprise_linux:6::server |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-develRed Hat:enterprise_linux:6::server |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-dviRed Hat:enterprise_linux:6::server |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-libsRed Hat:enterprise_linux:6::server |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evinceRed Hat:enterprise_linux:6::workstation |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-develRed Hat:enterprise_linux:6::workstation |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-dviRed Hat:enterprise_linux:6::workstation |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
evince-libsRed Hat:enterprise_linux:6::workstation |
before 0:2.28.2-14.el6_0.1 | 0:2.28.2-14.el6_0.1 |
t1libRed Hat:enterprise_linux:6::client |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-debuginfoRed Hat:enterprise_linux:6::client |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-appsRed Hat:enterprise_linux:6::client |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-develRed Hat:enterprise_linux:6::client |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-staticRed Hat:enterprise_linux:6::client |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1libRed Hat:enterprise_linux:6::computenode |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-appsRed Hat:enterprise_linux:6::computenode |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-develRed Hat:enterprise_linux:6::computenode |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-staticRed Hat:enterprise_linux:6::computenode |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1libRed Hat:enterprise_linux:6::server |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-appsRed Hat:enterprise_linux:6::server |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-develRed Hat:enterprise_linux:6::server |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-staticRed Hat:enterprise_linux:6::server |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1libRed Hat:enterprise_linux:6::workstation |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-appsRed Hat:enterprise_linux:6::workstation |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-develRed Hat:enterprise_linux:6::workstation |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-staticRed Hat:enterprise_linux:6::workstation |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
kpathseaRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texliveRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dvipsRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-latexRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-utilsRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathsea-develRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
mendexkRed Hat:enterprise_linux:6::client |
before 0:2.6e-57.el6_2 | 0:2.6e-57.el6_2 |
texlive-afmRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-contextRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dviutilsRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-east-asianRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-xetexRed Hat:enterprise_linux:6::client |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathseaRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathsea-develRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
mendexkRed Hat:enterprise_linux:6::computenode |
before 0:2.6e-57.el6_2 | 0:2.6e-57.el6_2 |
texliveRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-afmRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-contextRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dvipsRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dviutilsRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-east-asianRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-latexRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-utilsRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-xetexRed Hat:enterprise_linux:6::computenode |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathseaRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texliveRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dvipsRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-latexRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-utilsRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathsea-develRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
mendexkRed Hat:enterprise_linux:6::server |
before 0:2.6e-57.el6_2 | 0:2.6e-57.el6_2 |
texlive-afmRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-contextRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dviutilsRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-east-asianRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-xetexRed Hat:enterprise_linux:6::server |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathseaRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texliveRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dvipsRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-latexRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-utilsRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathsea-develRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
mendexkRed Hat:enterprise_linux:6::workstation |
before 0:2.6e-57.el6_2 | 0:2.6e-57.el6_2 |
texlive-afmRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-contextRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dviutilsRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-east-asianRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-xetexRed Hat:enterprise_linux:6::workstation |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
tetexRed Hat:enterprise_linux:5::client |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-afmRed Hat:enterprise_linux:5::client |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-docRed Hat:enterprise_linux:5::client |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-dvipsRed Hat:enterprise_linux:5::client |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-fontsRed Hat:enterprise_linux:5::client |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-latexRed Hat:enterprise_linux:5::client |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-xdviRed Hat:enterprise_linux:5::client |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetexRed Hat:enterprise_linux:5::server |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-afmRed Hat:enterprise_linux:5::server |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-docRed Hat:enterprise_linux:5::server |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-dvipsRed Hat:enterprise_linux:5::server |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-fontsRed Hat:enterprise_linux:5::server |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-latexRed Hat:enterprise_linux:5::server |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-xdviRed Hat:enterprise_linux:5::server |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
evinceopenSUSE:Tumbleweed |
before 3.22.1-1.1 | 3.22.1-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.mandriva.com/security-announce/2011-01/msg00006.php
mandriva.com/security/advisories?name=MDVSA-2011:016
secunia.com/advisories/42872
vupen.com/english/advisories/2011/0043
lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html
Show 79 moreShow less
lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
rhn.redhat.com/errata/RHSA-2012-1201.html
debian.org/security/2011/dsa-2357
ubuntu.com/usn/USN-1035-1
bugzilla.redhat.com/show_bug.cgi?id=666318
redhat.com/support/errata/RHSA-2011-0009.html
git.gnome.org/browse/evince/commit?id=d4139205b010ed06310d14284e63114e88ec6de2
securitytracker.com/id?1024937
securityfocus.com/bid/45678
security.gentoo.org/glsa/201701-57
nvd.nist.gov/vuln/detail/CVE-2010-2642
github.com/advisories/GHSA-3p5c-p75q-mfgv
security-tracker.debian.org/tracker/CVE-2010-2642
access.redhat.com/errata/RHSA-2011:0009
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0009.json
cve.org/CVERecord?id=CVE-2010-2640
suse.com/security/cve/CVE-2010-2640