[ GLSA 201111-10 ] Evince: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Evince: Multiple vulnerabilities (GLSA 201111-10)
Severity: normal
Exploitable: remote
Date: November 20, 2011
Bug(s): #350681, #363447
ID: 201111-10

Synopsis

Multiple vulnerabilities have been found in Evince, allowing remote
attackers to execute arbitrary code or cause a Denial of Service.


Background

Evince is a document viewer for multiple document formats, including
PostScript.


Affected Packages

Package: app-text/evince
Vulnerable: < 2.32.0-r2
Unaffected: >= 2.32.0-r2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Evince. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker could entice a user to load a DVI file with a
specially crafted font, resulting in the execution of arbitrary code with
the privileges of the user running the application or a Denial of
Service.


Workaround

There is no known workaround at this time.

Resolution

All Evince users should upgrade to the latest version: