evince (SUSE:Linux Enterprise Server for SAP Applications 12 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for SAP Applications 12 SP3 package evince, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2017-1000083 — CVSS 7.8 (high): backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary…
• CVE-2017-1000159 — CVSS 7.8 (high): Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.
• CVE-2019-1010006 — CVSS 7.8 (high): Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c…
• CVE-2019-11459 — CVSS 5.5 (medium): The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not…