CVE-2010-2640

CVE-2010-2640 describes an array index error in the PK font parser within the dvi-backend component of Evince 2.32 and earlier, affecting Red Hat Evince. This vulnerability can be triggered by remote attackers using a specially crafted font in conjunction with a DVI file, leading to a denial of service (application crash) or potentially arbitrary code execution. The vulnerability has a CVSS score of 7.6, indicating high severity due to a network attack vector with high complexity, and potential for complete compromise of confidentiality, integrity, and availability. Its EPSS score is low, suggesting a low probability of exploitation in the wild. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, consistent with the majority of CVEs.