Homepage

Integer Overflow or Wraparound The advisory has been revoked - it doesn't affect any version of package evince-plugin-comicsdocument  (opens in a new tab)

Threat Intelligence

EPSS
2.09% (80th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-SLES151-EVINCEPLUGINCOMICSDOCUMENT-2740259
  • published14 Apr 2022
  • disclosed6 Aug 2019
Report a new vulnerability Found a mistake?

Introduced: 6 Aug 2019

CVE-2019-1010006  (opens in a new tab)
CWE-190  (opens in a new tab)
CWE-787  (opens in a new tab)

Amendment

The SLES security team deemed this advisory irrelevant for SLES:15.1.

NVD Description

Note: Versions mentioned in the description apply only to the upstream evince-plugin-comicsdocument package and not the evince-plugin-comicsdocument package as distributed by SLES.

Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.