CVE-2010-2643

CVE-2010-2643 describes an integer overflow vulnerability in the TFM font parser within the dvi-backend component of Evince 2.32 and earlier, affecting products like Red Hat Evince. This flaw allows remote attackers to execute arbitrary code by crafting a malicious font file used with a DVI file processed by the thumbnailer. With a CVSS score of 7.6 (AV:N/AC:H/Au:N/C:C/I:C/A:C), it indicates high impact on confidentiality, integrity, and availability, but requires high attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.