Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade atrilUpgrade evince | Aug 15, 2019 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evince-dviUpgrade evince-nautilusUpgrade evinceUpgrade evince-libs | Sep 16, 2021 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade evinceUpgrade evince-libsUpgrade evince-dviUpgrade evince-nautilus | Apr 30, 2021 | Jul 15, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade evince-dviUpgrade evinceUpgrade evince-nautilusUpgrade evince-libs | Sep 12, 2019 | Jul 15, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 15, 2019 |
| Suse | — | Upgrade evince-browser-pluginUpgrade evinceUpgrade libevview3-3Upgrade evince-langUpgrade typelib-1_0-EvinceDocument-3_0Upgrade evince-plugin-psdocumentUpgrade evince-plugin-dvidocumentUpgrade evince-develUpgrade typelib-1_0-EvinceView-3_0Upgrade nautilus-evinceUpgrade evince-plugin-djvudocumentUpgrade evince-plugin-comicsdocumentUpgrade evince-plugin-pdfdocumentUpgrade libevdocument3-4Upgrade evince-plugin-xpsdocumentUpgrade evince-plugin-tiffdocumentUpgrade evince-doc | Aug 8, 2019 | Jul 15, 2019 |
| Ubuntu | — | Upgrade evinceUpgrade atril (Ubuntu Pro)Upgrade evince-common | Jul 23, 2019 | Jul 15, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub