evince-libs vulnerabilities (Red Hat)
95 vulnerabilities.
evince-libsRed HatMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 Highevince-libsRed HatA logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2,...6.1 Mediumevince-libsRed HatA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 Highevince-libsRed HatA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 Highevince-libsRed HatA memory corruption issue was addressed with improved state management. This issue is fixed in...8.8 Highevince-libsRed HatMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 Highevince-libsRed HatMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 Highevince-libsRed HatMultiple memory corruption issues were addressed with improved memory handling. This issue is...8.8 Highevince-libsRed HatA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...8.8 Highevince-libsRed HatWebKitGTK and WPE WebKit prior to version 2.24.1 failed to properly apply configured HTTP proxy...5.3 Mediumevince-libsRed HatAn issue was discovered in Poppler 0.74.0. There is a heap-based buffer over-read in the function...6.5 Mediumevince-libsRed HatPoppler 0.74.0 has a heap-based buffer over-read in the CairoRescaleBox.cc...9.8 Criticalevince-libsRed HatA heap-based buffer underwrite exists in ImageStream::getLine() located at Stream.cc in Poppler 0...8.8 Highevince-libsRed HatA vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration...6.3 Mediumevince-libsRed HatIt was discovered that the gnome-shell lock screen since version 3.15.91 did not properly...4.8 Mediumevince-libsRed HatIn Poppler 0.73.0, a heap-based buffer over-read (due to an integer signedness error in the XRef:...7.8 Highevince-libsRed HatWebKitGTK and WPE WebKit prior to version 2.24.1 are vulnerable to address bar spoofing upon...8.1 Highevince-libsRed HatIn Poppler 0.72.0, PDFDoc::setup in PDFDoc.cc allows attackers to cause a denial-of-service ...6.5 Mediumevince-libsRed HatA reachable Object::dictLookup assertion in Poppler 0.72.0 allows attackers to cause a denial of...6.5 Mediumevince-libsRed HatXRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows...6.5 Mediumevince-libsRed HatThere is a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp in...8.8 Highevince-libsRed HatPoppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from...6.5 Mediumevince-libsRed HatAn issue was discovered in Poppler 0.71.0. There is a NULL pointer dereference in goo/GooString.h...6.5 Mediumevince-libsRed HatAn issue was discovered in Poppler 0.71.0. There is a out-of-bounds read in EmbFile::save2 in...6.5 Mediumevince-libsRed HatAn issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to...6.5 Mediumevince-libsRed HatAn issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace:...6.5 Mediumevince-libsRed HatIn Poppler 0.68.0, the Parser::getObj() function in Parser.cc may cause infinite recursion via a...6.5 Mediumevince-libsRed HatPoppler through 0.62 contains an out of bounds read vulnerability due to an incorrect memory...6.5 Mediumevince-libsRed HatDirectory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an...6.5 Mediumevince-libsRed HatThe get_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have...9.8 Criticalevince-libsRed HatAn issue was discovered in certain Apple products. iOS before 11.4 is affected. iOS before 11.3.1...8.8 Highevince-libsRed HatWebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of...6.5 Mediumevince-libsRed HatWebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of...7.5 Highevince-libsRed HatThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...5.5 Mediumevince-libsRed HatAn issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before...8.8 Highevince-libsRed HatThere is a stack-based buffer over-read in calling GLib in the function...6.5 Mediumevince-libsRed HatThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...6.5 Mediumevince-libsRed HatThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...6.5 Mediumevince-libsRed HatAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11...8.8 Highevince-libsRed HatAn exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment...8.8 Highevince-libsRed Hatbackend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1...7.8 Highevince-libsRed HatInteger overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier...7.6 Highevince-libsRed HatHeap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and...7.6 Highevince-libsRed HatArray index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier...7.6 Highevince-libsRed HatArray index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier...7.6 High