mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
436 lines
14 KiB
JSON
436 lines
14 KiB
JSON
{
|
|
"id": "CVE-2010-2641",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2011-01-07T19:00:17.267",
|
|
"lastModified": "2024-11-21T01:17:04.207",
|
|
"vulnStatus": "Modified",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Error de \u00edndice en Array en el analizador de fuente FV en el componente DVI-backend en Evince v2.32 y anteriores permite a atacantes remotos provocar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n) o posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de una fuente dise\u00f1ada junto con un archivo DVI que se procesa por el gestor de miniaturas."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
|
|
"baseScore": 7.6,
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "HIGH",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "COMPLETE",
|
|
"integrityImpact": "COMPLETE",
|
|
"availabilityImpact": "COMPLETE"
|
|
},
|
|
"baseSeverity": "HIGH",
|
|
"exploitabilityScore": 4.9,
|
|
"impactScore": 10.0,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": false,
|
|
"userInteractionRequired": true
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-20"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "2.32",
|
|
"matchCriteriaId": "20283624-F068-45D0-ABCF-F02BAD8105FB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:0.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B2C4D8E2-B5D1-4229-8C4E-A5D3D45CE232"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:0.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D9B61463-DAAD-42B9-A9E4-7D5C0FC94A26"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:0.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "682240C5-7830-45AC-A8E8-F012519E3BB5"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:0.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9299EE95-FB9F-40A3-ACBA-9F8675D04314"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:0.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5C9D303A-590D-4D6E-A76E-ED05F5CA3A68"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:0.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "06F244EC-8257-4B41-8CE1-0BE3F81C6F3B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:0.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "774E0BE3-5F1F-4C39-9ED2-35E1A0FDE845"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:0.8:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3D2EC73E-7AAF-4524-ABA7-5236F1FBD2C3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:0.9:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6B271944-EAC3-4E79-95BB-58FA1E7EB26B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.19:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "47E24A04-E690-4F80-B0F6-7166B01B732A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.20:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "47173787-5BD5-4131-A8CD-0D00D1187C41"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.21:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F6508CBF-FC04-441D-9D86-955E6FAA0296"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.22:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CD94C302-7E99-4F0D-B6CA-9D59120DE5D7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.23:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "750B45E1-7D9D-45BE-8B0B-A5B7045DE309"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.24:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7E840F13-F8BC-4A99-9404-94E2292F02BB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.25:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1EEFEFB1-A14F-4100-A4AD-0B28E6A2B84D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.26:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2CACCB74-DE05-4619-8E69-38686FFE9BB8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.27:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4E72F3DA-2BA2-4D5E-96E4-8DDDBF7200DB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.28:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2DCCF82E-BFC7-4459-98C2-54754636664B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.29:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6CA2BC54-6E75-493D-953D-DC41ADBCFAE8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.29.92:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1660E63C-4CD1-4B43-9A40-0B731FC5C1C2"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.30:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "9E3ED013-4381-4996-96D8-C560EB24C173"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.30.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "219D9DEE-0720-4871-8DDC-C24F5F6FB056"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.30.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6456E479-7A12-4904-8054-354AC4FC32AB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.31:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "ED7BFBC3-4F4F-4E36-BE99-4E6C4CEE2B2F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.31.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "62F1AA5A-33FE-4C61-8311-3FE44CE9C04B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.31.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0232A03E-43BC-4AC3-8175-BD3BAAB842A3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.31.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "CAA8CD39-5229-44AF-AC3D-2713E753D782"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.31.4.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F8DC7981-BA67-463C-AA67-96F8EE9C6DD1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.31.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "4D23AD37-4BBA-4B5B-961F-89AFD892E4C6"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.31.6.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B8783726-03D8-4DBE-8F2A-DC01B29C18F3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.31.90:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "AE5419CF-CC0A-451C-A9CE-4CA811EFDCA7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:redhat:evince:2.31.92:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DAE1D8FE-395E-4009-B91C-4CC966952837"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Patch"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://lists.mandriva.com/security-announce/2011-01/msg00006.php",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/42769",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/42821",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/42847",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/42872",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.debian.org/security/2011/dsa-2357",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.redhat.com/support/errata/RHSA-2011-0009.html",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/45678",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securitytracker.com/id?1024937",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.ubuntu.com/usn/USN-1035-1",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0029",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0043",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0056",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0097",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0102",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=666314",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Patch"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://git.gnome.org/browse/evince/commit/?id=d4139205b010ed06310d14284e63114e88ec6de2",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Patch"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052910.html",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052995.html",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://lists.mandriva.com/security-announce/2011-01/msg00006.php",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/42769",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/42821",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/42847",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://secunia.com/advisories/42872",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.debian.org/security/2011/dsa-2357",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.redhat.com/support/errata/RHSA-2011-0009.html",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/45678",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.securitytracker.com/id?1024937",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.ubuntu.com/usn/USN-1035-1",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0029",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0043",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0056",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0097",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "http://www.vupen.com/english/advisories/2011/0102",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
},
|
|
{
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=666314",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108",
|
|
"tags": [
|
|
"Patch"
|
|
]
|
|
}
|
|
]
|
|
} |