CVE-2013-3718: Input Validation

Published Nov 1, 2019

Updated

evince is missing a check on number of pages which can lead to a segmentation fault

Affected Software

8 affected componentsFixes available

Gnome Evince=3.8.2

Gnome Evince=3.9.2

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Debian Debian Linux=10.0

openSUSE openSUSE=13.1

redhat Enterprise Linux=5.0

debian/evince

3.38.2-143.1-248.1-349~alpha-2

Remediation

Patch Available

http://bugzilla.gnome.org/show_bug.cgi?id=701302

Event History

Nov 1, 2019

CVE Published

via MITRE·12:24 PM

Data Sourced

via MITRE·12:24 PM

Description

Feb 18, 2026

Data Sourced

via Debian·04:46 PM

DescriptionAffected Software

Frequently Asked Questions

What is CVE-2013-3718?

CVE-2013-3718 is a vulnerability in evince that allows an attacker to cause a segmentation fault by exploiting a missing check on the number of pages.

What is the severity of CVE-2013-3718?

The severity of CVE-2013-3718 is medium with a CVSS score of 5.5.

How does CVE-2013-3718 affect evince?

CVE-2013-3718 affects evince by exploiting a missing check on the number of pages, leading to a segmentation fault.

Is there a fix for CVE-2013-3718?

Yes, updating evince to version 3.30.2-3+deb10u1, 3.38.2-1, 43.1-2, or 45.0-1 will fix CVE-2013-3718.

Where can I find more information about CVE-2013-3718?

You can find more information about CVE-2013-3718 at the following references: [1](http://bugzilla.gnome.org/show_bug.cgi?id=701302), [2](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-3718), [3](https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-3718).