evince-devel vulnerabilities (Red Hat)
40 vulnerabilities.
-
evince-develRed Hat PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen 8.4 High -
evince-develRed Hat A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote... 7.5 High -
evince-develRed Hat Poppler before 0.76.0 has an integer overflow in Parser::makeStream in Parser.cc. 8.8 High -
evince-develRed Hat FreeType before 2.6.1 has a buffer over-read in skip_comment in psaux/psobjs.c because... 6.5 Medium -
evince-develRed Hat FreeType before 2.6.1 has a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c. 8.8 High -
evince-develRed Hat An issue was discovered in Poppler through 0.78.0. There is a divide-by-zero error in the... 7.5 High -
evince-develRed Hat The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of... 6.5 Medium -
evince-develRed Hat In Poppler through 0.76.1, there is a heap-based buffer over-read in JPXStream::init in... 8.8 High -
evince-develRed Hat The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document... 5.5 Medium -
evince-develRed Hat An issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function... 6.5 Medium -
evince-develRed Hat Poppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc... 9.8 Critical -
evince-develRed Hat A heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0... 8.8 High -
evince-develRed Hat In Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:... 7.8 High -
evince-develRed Hat In Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service ... 6.5 Medium -
evince-develRed Hat A reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of... 6.5 Medium -
evince-develRed Hat XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows... 6.5 Medium -
evince-develRed Hat Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from... 6.5 Medium -
evince-develRed Hat An issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h... 6.5 Medium -
evince-develRed Hat An issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in... 6.5 Medium -
evince-develRed Hat An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to... 6.5 Medium -
evince-develRed Hat An issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace:... 6.5 Medium -
evince-develRed Hat In Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a... 6.5 Medium -
evince-develRed Hat Poppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory... 6.5 Medium -
evince-develRed Hat Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an... 6.5 Medium -
evince-develRed Hat The get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have... 9.8 Critical -
evince-develRed Hat An issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1... 8.8 High -
evince-develRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 6.5 Medium -
evince-develRed Hat WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of... 7.5 High -
evince-develRed Hat The FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote... 5.5 Medium -
evince-develRed Hat An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before... 8.8 High -
evince-develRed Hat There is a stack-based buffer over-read in calling GLib in the function... 6.5 Medium -
evince-develRed Hat There is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an... 6.5 Medium -
evince-develRed Hat There is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in... 6.5 Medium -
evince-develRed Hat An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11... 8.8 High -
evince-develRed Hat An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment... 8.8 High -
evince-develRed Hat backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1... 7.8 High -
evince-develRed Hat Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier... 7.6 High -
evince-develRed Hat Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and... 7.6 High -
evince-develRed Hat Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier... 7.6 High -
evince-develRed Hat Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier... 7.6 High