CVE:CVE-2010-2641
CNNVD:CNNVD-201101-043
Evince是GNOME桌面环境下的一个PDF，PostScript，DjVu，TIFF与DVI文档查看工具。
Evince 2.32及之前版本中的dvi-backend组件中的VF字体解析器中存在数组索引错误漏洞。远程攻击者可以借助特制字体结合通过thumbnailer处理的DVI文件导致拒绝服务(应用程序崩溃)或者可能执行任意代码。
solution:Upgrade redhat evince to a higher version than 2.32,0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,2.19,2.20,2.21,2.22,2.23,2.24,2.25,2.26,2.27,2.28,2.29,2.29.92,2.30,2.30.2,2.30.3,2.31,2.31.1,2.31.2,2.31.4,2.31.4.1,2.31.6,2.31.6.1,2.31.90,2.31.92,and avoid the version (,2.32],0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,2.19,2.20,2.21,2.22,2.23,2.24,2.25,2.26,2.27,2.28,2.29,2.29.92,2.30,2.30.2,2.30.3,2.31,2.31.1,2.31.2,2.31.4,2.31.4.1,2.31.6,2.31.6.1,2.31.90,2.31.92