Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.

According to the version of the evince packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Evince 3.26.0 is affected by buffer overflow. The     impact is: DOS / Possible code execution. The component     is: backend/tiff/tiff-document.c. The attack vector is:
    Victim must open a crafted PDF file. The issue occurs     because of an incorrect integer overflow protection     mechanism in tiff_document_render and     tiff_document_get_thumbnail.(CVE-2019-1010006)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14141-1 advisory.

  - Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component     is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue     occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and     tiff_document_get_thumbnail. (CVE-2019-1010006)

  - The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in     GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to     uninitialized memory use when processing certain TIFF image files. (CVE-2019-11459)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the evince packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Evince 3.26.0 is affected by buffer overflow. The     impact is: DOS / Possible code execution. The component     is: backend/tiff/tiff-document.c. The attack vector is:
    Victim must open a crafted PDF file. The issue occurs     because of an incorrect integer overflow protection     mechanism in tiff_document_render and     tiff_document_get_thumbnail.(CVE-2019-1010006)

  - The tiff_document_render() and     tiff_document_get_thumbnail() functions in the TIFF     document backend in GNOME Evince through 3.32.0 did not     handle errors from TIFFReadRGBAImageOriented(), leading     to uninitialized memory use when processing certain     TIFF image files.(CVE-2019-11459)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities were discovered in evince, a simple multi-page document viewer.

  - CVE-2017-1000159     Tobias Mueller reported that the DVI exporter in evince     is susceptible to a command injection vulnerability via     specially crafted filenames.

  - CVE-2019-11459     Andy Nguyen reported that the tiff_document_render() and     tiff_document_get_thumbnail() functions in the TIFF     document backend did not handle errors from     TIFFReadRGBAImageOriented(), leading to disclosure of     uninitialized memory when processing TIFF image files.

  - CVE-2019-1010006     A buffer overflow vulnerability in the tiff backend     could lead to denial of service, or potentially the     execution of arbitrary code if a specially crafted PDF     file is opened.

This update for evince fixes the following issues :

  - CVE-2019-1010006: Fixed a buffer overflow in     backend/tiff/tiff-document.c (bsc#1141619).

This update was imported from the SUSE:SLE-15:Update update project.

A few issues were found in Atril, the MATE document viewer.

CVE-2017-1000159

When printing from DVI to PDF, the dvipdfm tool was called without properly sanitizing the filename, which could lead to a command injection attack via the filename.

CVE-2019-11459

The tiff_document_render() and tiff_document_get_thumbnail() did not check the status of TIFFReadRGBAImageOriented(), leading to uninitialized memory access if that funcion fails.

CVE-2019-1010006

Some buffer overflow checks were not properly done, leading to application crash or possibly arbitrary code execution when opening maliciously crafted files.

For Debian 8 'Jessie', these problems have been fixed in version 1.8.1+dfsg1-4+deb8u2.

We recommend that you upgrade your atril packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A few issues were found in the Evince document viewer.

CVE-2017-1000159

When printing from DVI to PDF, the dvipdfm tool was called without properly sanitizing the filename, which could lead to a command injection attack via the filename.

CVE-2019-11459

The tiff_document_render() and tiff_document_get_thumbnail() did not check the status of TIFFReadRGBAImageOriented(), leading to uninitialized memory access if that funcion fails.

CVE-2019-1010006

Some buffer overflow checks were not properly done, leading to application crash or possibly arbitrary code execution when opening maliciously crafted files.

For Debian 8 'Jessie', these problems have been fixed in version 3.14.1-2+deb8u3.

We recommend that you upgrade your evince packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for evince fixes the following issues :

Security issues fixed :

CVE-2019-11459: Fixed an improper error handling in which could have led to use of uninitialized use of memory (bsc#1133037).

CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for evince fixes the following issues :

CVE-2019-1010006: Fixed a buffer overflow in backend/tiff/tiff-document.c (bsc#1141619).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Evince incorrectly handled certain PDF files.
An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
153270	EulerOS 2.0 SP2 : evince (EulerOS-SA-2021-2366)	Nessus	Huawei Local Security Checks	high
150626	SUSE SLES11 Security Update : evince (SUSE-SU-2019:14141-1)	Nessus	SuSE Local Security Checks	high
149153	EulerOS 2.0 SP3 : evince (EulerOS-SA-2021-1778)	Nessus	Huawei Local Security Checks	high
133731	Debian DSA-4624-1 : evince - security update	Nessus	Debian Local Security Checks	high
128829	EulerOS 2.0 SP5 : evince (EulerOS-SA-2019-1906)	Nessus	Huawei Local Security Checks	high
128000	openSUSE Security Update : evince (openSUSE-2019-1908)	Nessus	SuSE Local Security Checks	high
127864	Debian DLA-1882-1 : atril security update	Nessus	Debian Local Security Checks	high
127863	Debian DLA-1881-1 : evince security update	Nessus	Debian Local Security Checks	high
127785	SUSE SLES12 Security Update : evince (SUSE-SU-2019:2098-1)	Nessus	SuSE Local Security Checks	high
127778	SUSE SLED12 / SLES12 Security Update : evince (SUSE-SU-2019:2080-1)	Nessus	SuSE Local Security Checks	high
127767	SUSE SLED15 / SLES15 Security Update : evince (SUSE-SU-2019:2052-1)	Nessus	SuSE Local Security Checks	high
126947	Ubuntu 16.04 LTS : Evince vulnerability (USN-4067-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2019-1010006

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high