CVE-2019-1010006
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The...
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
- Record
CVE-2019-1010006- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-190, CWE-787
- Updated
- 2026-11-02
CVE List No score
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
- Record
CVE-2019-1010006- Updated
- 2026-11-02
EUVDEUVD-2019-1758 No score
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
- Record
EUVD-2019-1758- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p9m6-v44h-ccmx
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The...
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victin must open a crafted PDF file.
- Record
GHSA-p9m6-v44h-ccmx- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSV
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
- Record
CVE-2019-1010006- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-1010006
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
- Record
DEBIAN-CVE-2019-1010006- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSVUBUNTU-CVE-2019-1010006
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
- Record
UBUNTU-CVE-2019-1010006- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2019:1908-1 No score
Security update for evince
This update for evince fixes the following issues:
- CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2019:1908-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10742-1 No score
evince-40.4-1.3 on GA media
These are all security issues fixed in the evince-40.4-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10742-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:14141-1 No score
Security update for evince
This update for evince fixes the following issues:
Security issues fixed:
- CVE-2019-11459: Fixed an improper error handling in which could have led to use of uninitialized use of memory (bsc#1133037).
- CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).
- Record
SUSE-SU-2019:14141-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2052-1 No score
Security update for evince
This update for evince fixes the following issues:
- CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).
- Record
SUSE-SU-2019:2052-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2080-1 No score
Security update for evince
This update for evince fixes the following issues:
Security issues fixed:
- CVE-2019-11459: Fixed an improper error handling in which could have led to use of uninitialized use of memory (bsc#1133037).
- CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).
- Record
SUSE-SU-2019:2080-1- Updated
- 2026-11-02
OSVSUSE-SU-2019:2080-2 No score
Security update for evince
This update for evince fixes the following issues:
Security issues fixed:
- CVE-2019-11459: Fixed an improper error handling in which could have led to use of uninitialized use of memory (bsc#1133037).
- CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).
- Record
SUSE-SU-2019:2080-2- Updated
- 2026-11-02
OSVSUSE-SU-2019:2098-1 No score
Security update for evince
This update for evince fixes the following issues:
Security issues fixed:
- CVE-2019-11459: Fixed an improper error handling in which could have led to use of uninitialized use of memory (bsc#1133037).
- CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).
- Record
SUSE-SU-2019:2098-1- Updated
- 2026-11-02
OSVUSN-4067-1 No score
evince vulnerability
It was discovered that Evince incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code.
- Record
USN-4067-1- Updated
- 2026-11-02
OSVUSN-7274-1 No score
atril vulnerabilities
It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-1010006)
Andy Nguyen discovered that Atril incorrectly handled certain images. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-11459)
Febin Mon Saji discovered that Atril incorrectly handled certain compressed files. A remote attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. (CVE-2023-51698)
- Record
USN-7274-1- Updated
- 2026-11-02
OSVUSN-8839-1 No score
atril vulnerabilities
It was discovered that Atril did not properly sanitize command-line arguments in PDF /GoToR actions. If a user opened a specially crafted PDF file, an attacker could possibly use this issue to execute arbitrary code. (CVE-2026-46529)
It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-1010006)
Andy Nguyen discovered that Atril incorrectly handled certain images. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-11459)
- Record
USN-8839-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
atrilDebian:12 |
before 1.22.2-1 | 1.22.2-1 |
atrilDebian:13 |
before 1.22.2-1 | 1.22.2-1 |
atrilDebian:14 |
before 1.22.2-1 | 1.22.2-1 |
evinceDebian:12 |
before 3.27.92-1 | 3.27.92-1 |
evinceDebian:13 |
before 3.27.92-1 | 3.27.92-1 |
evinceDebian:8 From an advisory covering 3 CVEs |
before 3.14.1-2+deb8u3, plus listed versions 3.14.1-23.14.1-2+deb8u13.14.1-2+deb8u2 |
3.14.1-2+deb8u3 |
atrilDebian:8 From an advisory covering 3 CVEs |
before 1.8.1+dfsg1-4+deb8u2, plus listed versions 1.8.1+dfsg1-41.8.1+dfsg1-4+deb8u1 |
1.8.1+dfsg1-4+deb8u2 |
evinceDebian:9 From an advisory covering 3 CVEs |
before 3.22.1-3+deb9u2, plus listed versions 3.22.1-33.22.1-3+deb9u1 |
3.22.1-3+deb9u2 |
evinceSUSE:Linux Enterprise Point of Sale 11 SP3 From an advisory covering 2 CVEs |
before 2.28.2-0.7.8.1 | 2.28.2-0.7.8.1 |
evinceSUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 2 CVEs |
before 2.28.2-0.7.8.1 | 2.28.2-0.7.8.1 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
evinceSUSE:Linux Enterprise Module for Desktop Applications 15 |
before 3.26.0+20180128.1bd86963-4.10.1 | 3.26.0+20180128.1bd86963-4.10.1 |
evinceSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 |
before 3.26.0+20180128.1bd86963-4.10.1 | 3.26.0+20180128.1bd86963-4.10.1 |
evinceSUSE:OpenStack Cloud 7 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Workstation Extension 12 SP4 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Enterprise Storage 4 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Enterprise Storage 5 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 3.20.2-6.27.1 | 3.20.2-6.27.1 |
evinceSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 2 CVEs |
before 3.10.3-2.8.1 | 3.10.3-2.8.1 |
evinceSUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 2 CVEs |
before 3.10.3-2.8.1 | 3.10.3-2.8.1 |
evinceUbuntu:16.04:LTS |
before 3.18.2-1ubuntu4.6, plus listed versions 3.16.1-0ubuntu13.18.1-1ubuntu13.18.1-1ubuntu23.18.2-1ubuntu13.18.2-1ubuntu2 Show 7 moreShow less3.18.2-1ubuntu33.18.2-1ubuntu43.18.2-1ubuntu4.13.18.2-1ubuntu4.23.18.2-1ubuntu4.33.18.2-1ubuntu4.43.18.2-1ubuntu4.5 |
3.18.2-1ubuntu4.6 |
atrilUbuntu:Pro:18.04:LTS |
before 1.20.1-2ubuntu2+esm2, plus listed versions 1.18.1-11.18.3-11.19.6-0ubuntu11.20.0-0ubuntu11.20.1-0ubuntu1 Show 4 moreShow less1.20.1-11.20.1-2ubuntu11.20.1-2ubuntu21.20.1-2ubuntu2+esm1 |
1.20.1-2ubuntu2+esm2 |
atrilUbuntu:Pro:18.04:LTS From an advisory covering 3 CVEs |
before 1.20.1-2ubuntu2+esm2, plus listed versions 1.18.1-11.18.3-11.19.6-0ubuntu11.20.0-0ubuntu11.20.1-0ubuntu1 Show 4 moreShow less1.20.1-11.20.1-2ubuntu11.20.1-2ubuntu21.20.1-2ubuntu2+esm1 |
1.20.1-2ubuntu2+esm2 |
atrilUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 1.24.0-1ubuntu0.2, plus listed versions 1.22.2-0ubuntu11.24.0-0ubuntu11.24.0-11.24.0-1ubuntu0.1 |
1.24.0-1ubuntu0.2 |
atrilUbuntu:22.04:LTS From an advisory covering 3 CVEs |
before 1.26.0-1ubuntu1.2, plus listed versions 1.26.0-0ubuntu11.26.0-1ubuntu11.26.0-1ubuntu1.1 |
1.26.0-1ubuntu1.2 |
atrilUbuntu:Pro:16.04:LTS From an advisory covering 3 CVEs |
before 1.12.2-1ubuntu0.3+esm1, plus listed versions 1.10.2+repack1-11.12.2-11.12.2-1ubuntu0.11.12.2-1ubuntu0.21.12.2-1ubuntu0.3 |
1.12.2-1ubuntu0.3+esm1 |
atrilUbuntu:Pro:18.04:LTS From an advisory covering 3 CVEs |
before 1.20.1-2ubuntu2+esm3, plus listed versions 1.18.1-11.18.3-11.19.6-0ubuntu11.20.0-0ubuntu11.20.1-0ubuntu1 Show 5 moreShow less1.20.1-11.20.1-2ubuntu11.20.1-2ubuntu21.20.1-2ubuntu2+esm11.20.1-2ubuntu2+esm2 |
1.20.1-2ubuntu2+esm3 |
atrilUbuntu:Pro:20.04:LTS From an advisory covering 3 CVEs |
before 1.24.0-1ubuntu0.2+esm1, plus listed versions 1.22.2-0ubuntu11.24.0-0ubuntu11.24.0-11.24.0-1ubuntu0.11.24.0-1ubuntu0.2 |
1.24.0-1ubuntu0.2+esm1 |
atrilUbuntu:Pro:22.04:LTS From an advisory covering 3 CVEs |
before 1.26.0-1ubuntu1.2+esm1, plus listed versions 1.26.0-0ubuntu11.26.0-1ubuntu11.26.0-1ubuntu1.11.26.0-1ubuntu1.2 |
1.26.0-1ubuntu1.2+esm1 |
atrilUbuntu:Pro:24.04:LTS From an advisory covering 3 CVEs |
before 1.26.2-3ubuntu0.1~esm1, plus listed versions 1.26.0-2fakesync11.26.1-11.26.1-31.26.1-41.26.2-11.26.2-1.1build31.26.2-3build11.26.2-3build2 |
1.26.2-3ubuntu0.1~esm1 |
atrilUbuntu:Pro:26.04:LTS From an advisory covering 3 CVEs |
before 1.28.2-1ubuntu0.1~esm1, plus listed versions 1.26.2-51.28.2-1 |
1.28.2-1ubuntu0.1~esm1 |
evinceopenSUSE:Leap 15.0 |
before 3.26.0+20180128.1bd86963-lp151.4.6.1 | 3.26.0+20180128.1bd86963-lp151.4.6.1 |
evinceopenSUSE:Leap 15.1 |
before 3.26.0+20180128.1bd86963-lp151.4.6.1 | 3.26.0+20180128.1bd86963-lp151.4.6.1 |
evinceopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 40.4-1.3 | 40.4-1.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-1010006 is a high vulnerability (CVSS 7.8) in Evince Team Evince, published July 14, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. Fixed in atril 1.22.2-1.
References
bugzilla.gnome.org/show_bug.cgi?id=788980
bugzilla.maptools.org/show_bug.cgi?id=2745
usn.ubuntu.com/4067-1
lists.debian.org/debian-lts-announce/2019/08/msg00013.html
lists.opensuse.org/opensuse-security-announce/2019-08/msg00046.html
Show 27 moreShow less
debian.org/security/2020/dsa-4624
seclists.org/bugtraq/2020/Feb/18
nvd.nist.gov/vuln/detail/CVE-2019-1010006
github.com/advisories/GHSA-p9m6-v44h-ccmx
security-tracker.debian.org/tracker/CVE-2019-1010006
suse.com/support/update/announcement/2019/suse-su-201914141-1
bugzilla.suse.com/1133037
ubuntu.com/security/CVE-2019-1010006
gitlab.gnome.org/GNOME/evince/commit/e6ed0d4cdb6326e329c8f61f9cc19ff9331cb0ce
cve.org/CVERecord?id=CVE-2019-1010006