The remote host is missing an update to evince announced via advisory DSA 1243-1. Renaud Lifchitz discovered that gv, the PostScript and PDF viewer for X, performs insufficient boundary checks in the Postscript parsing code, which allows the execution of arbitrary code through a buffer overflow. Evince embeds a copy of gv and needs an update as well.

For the stable distribution (sarge) this problem has been fixed in version 0.1.5-2sarge1. For the upcoming stable distribution (etch) this problem has been fixed in version 0.4.0-3. For the unstable distribution (sid) this problem has been fixed in version 0.4.0-3. We recommend that you upgrade your evince package. https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201243-1