Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-7889

Опубликовано: 08 мар. 2018
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Средний

Описание

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:calibre-ebook:calibre:3.18.0:*:*:*:*:*:*:*

EPSS

Процентиль: 93%
0.11035
Средний

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-502

Связанные уязвимости

ubuntu логотип

CVE-2018-7889

CVSS3: 7.8
ubuntu
почти 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

debian логотип

CVE-2018-7889

CVSS3: 7.8
debian
почти 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on i ...

github логотип

GHSA-7hmv-6p8v-7rmw

CVSS3: 7.8
github
больше 3 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

EPSS

Процентиль: 93%
0.11035
Средний

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-502