REDHAT-BUG-679732: Buffer Overflow

Published Feb 23, 2011

Updated

A heap-based buffer overflow flaw was found in the way AFM font file parser, used for rendering of DVI files, in GNOME evince document viewer and other products, processed line tokens from the given input stream. A remote attacker could provide a DVI file, with embedded specially-crafted font file, and trick the local user to open it with an application using the AFM font parser, leading to that particular application crash or, potentially, arbitrary code execution with the privileges of the user running the application. Different vulnerability than CVE-2010-2642.

Upstream bug report: [1] https://bugzilla.gnome.org/showbug.cgi?id=640923

Upstream patch: [2] https://bugzilla.gnome.org/showbug.cgi?id=640923#c1

Affected Software

1 affected component

Gnome Evince

Event History

Feb 23, 2011

Data Sourced

via Red Hat·11:18 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-679732?

The severity of REDHAT-BUG-679732 is high due to the potential for a heap-based buffer overflow allowing remote code execution.

How do I fix REDHAT-BUG-679732?

To fix REDHAT-BUG-679732, update the GNOME evince document viewer to the latest version that includes the security patch.

What systems are affected by REDHAT-BUG-679732?

The primary affected system of REDHAT-BUG-679732 is the GNOME evince document viewer.

Can REDHAT-BUG-679732 be exploited remotely?

Yes, REDHAT-BUG-679732 can be exploited remotely by an attacker providing a malicious DVI file.

What are the consequences of an exploit of REDHAT-BUG-679732?

Exploitation of REDHAT-BUG-679732 can lead to execution of arbitrary code on the affected system.