Описание
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| calibre | fixed | 2.75.1+dfsg-1 | package | |
| calibre | no-dsa | jessie | package |
Примечания
Upstream report: https://launchpad.net/bugs/1651728
Upstream fix: https://github.com/kovidgoyal/calibre/commit/3a89718664cb8cce0449d1758eee585ed0d0433c
https://www.openwall.com/lists/oss-security/2017/01/29/8
EPSS
Связанные уязвимости
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
ALT-PU-2017-1142: package `calibre` update to version 2.78.0-alt1
EPSS