CVE ID:	CVE-2019-1010006
Description:	Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff- document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail.
Test IDs:	1.3.6.1.4.1.25623.1.0.844101   1.3.6.1.4.1.25623.1.1.2.2021.2366   1.3.6.1.4.1.25623.1.0.891881   1.3.6.1.4.1.25623.1.0.852651   1.3.6.1.4.1.25623.1.1.4.2019.2052.1   1.3.6.1.4.1.25623.1.0.891882   1.3.6.1.4.1.25623.1.1.2.2019.1906   1.3.6.1.4.1.25623.1.0.704624
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-1010006 Bugtraq: 20200216 [SECURITY] [DSA 4624-1] evince security update (Google Search) https://seclists.org/bugtraq/2020/Feb/18 Debian Security Information: DSA-4624 (Google Search) https://www.debian.org/security/2020/dsa-4624 http://bugzilla.maptools.org/show_bug.cgi?id=2745 https://bugzilla.gnome.org/show_bug.cgi?id=788980 https://lists.debian.org/debian-lts-announce/2019/08/msg00013.html https://lists.debian.org/debian-lts-announce/2019/08/msg00014.html SuSE Security Announcement: openSUSE-SU-2019:1908 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00046.html https://usn.ubuntu.com/4067-1/