GCVE - cpe:2.3:a:gnome:evince:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:evince:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Gnome (`0ee6d85f-ce9a-5064-936c-231d12a60ad5`)
Product	Evince (`cb1a5fa7-fd33-5bec-ac70-817cfd52b69c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/evince`	purl2cpe	2026-06-01 10:17:22.179709
`pkg:deb/ubuntu/evince`	purl2cpe	2026-06-01 10:17:22.179713
`pkg:github/gnome/evince`	purl2cpe	2026-06-01 10:17:22.179717
`pkg:rpm/fedora/evince`	purl2cpe	2026-06-01 10:17:22.179720
`pkg:rpm/opensuse/evince`	purl2cpe	2026-06-01 10:17:22.179724

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-5244`	vulnerable	2026-06-08 04:59:35.279252	Details available Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433. Published: 2012-11-19T11:00:00.000Z Updated: 2024-08-07T00:30:46.795Z Open on db.gcve.eu Reference links https://bugzilla.gnome.org/show_bug.cgi?id=643882 https://exchange.xforce.ibmcloud.com/vulnerabilities/80271 http://www.openwall.com/lists/oss-security/2011/03/04/21 http://git.gnome.org/browse/evince/commit/?id=d4139205b010 https://security.gentoo.org/glsa/201701-57	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0433`	vulnerable	2026-06-08 04:56:37.080842	Details available Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642. Published: 2012-11-19T11:00:00.000Z Updated: 2024-08-06T21:51:08.799Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=679732 http://secunia.com/advisories/48985 http://xorl.wordpress.com/2011/02/20/cve-2011-0433-evince-linetoken-buffer-overflow/ http://rhn.redhat.com/errata/RHSA-2012-1201.html https://bugzilla.gnome.org/show_bug.cgi?id=640923	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.