Описание
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 1.18.1-1 |
| devel | not-affected | 1.18.1-1 |
| esm-apps/xenial | released | 1.12.2-1ubuntu0.2 |
| esm-infra-legacy/trusty | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | released | 1.18.0-1 |
| vivid/ubuntu-core | DNE | |
| xenial | released | 1.12.2-1ubuntu0.2 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 3.24.1-0ubuntu1 |
| devel | not-affected | 3.24.1-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [3.10.3-0ubuntu10.3]] |
| esm-infra/xenial | released | 3.18.2-1ubuntu4.1 |
| precise/esm | DNE | |
| trusty | released | 3.10.3-0ubuntu10.3 |
| trusty/esm | DNE | trusty was released [3.10.3-0ubuntu10.3] |
| upstream | released | 3.24.1 |
| vivid/ubuntu-core | DNE | |
| xenial | released | 3.18.2-1ubuntu4.1 |
Показывать по
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3
Связанные уязвимости
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
backend/comics/comics-document.c (aka the comic book backend) in GNOME ...
EPSS
6.8 Medium
CVSS2
7.8 High
CVSS3