Redhat Evince vulnerabilities

CVE-2010-2642 [HIGH] CWE-119 CVE-2010-2642: Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and ea Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

CVE-2010-2641 [HIGH] CWE-20 CVE-2010-2641: Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allo Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

CVE-2010-2640 [HIGH] CWE-20 CVE-2010-2640: Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allo Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.

CVE-2010-2643 [HIGH] CWE-189 CVE-2010-2643: Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allo Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.