Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1347-1
Solution
Please Install the Updated Packages.
Insight
It was discovered that Evince did not properly parse AFM font files when processing DVI files. If a user were tricked into opening a specially crafted DVI file, an attacker could cause Evince to crash or potentially execute arbitrary code with the privileges of the user invoking the program.
In the default installation, attackers would be isolated by the Evince AppArmor profile.
Affected
evince on Ubuntu 11.04 ,
Ubuntu 10.10 ,
Ubuntu 10.04 LTS
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2011-0433 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities