Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-1000801

Опубликовано: 06 сент. 2018
Источник: ubuntu
Приоритет: low
CVSS2: 4.3
CVSS3: 5.5

Описание

okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1

РелизСтатусПримечание
bionic

ignored

end of standard support, was needed
cosmic

ignored

end of life
devel

not-affected

4:18.12.3-0ubuntu1
disco

not-affected

4:18.12.3-0ubuntu1
eoan

not-affected

4:18.12.3-0ubuntu1
esm-apps/bionic

released

4:17.12.3-0ubuntu1+esm1
esm-apps/focal

not-affected

4:18.12.3-0ubuntu1
esm-apps/jammy

not-affected

4:18.12.3-0ubuntu1
esm-apps/noble

not-affected

4:18.12.3-0ubuntu1
esm-apps/xenial

needs-triage

Показывать по

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
больше 7 лет назад

okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1

CVSS3: 5.5
nvd
больше 7 лет назад

okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1

CVSS3: 5.5
debian
больше 7 лет назад

okular version 18.08 and earlier contains a Directory Traversal vulner ...

suse-cvrf
больше 7 лет назад

Security update for okular

suse-cvrf
больше 7 лет назад

Security update for okular

4.3 Medium

CVSS2

5.5 Medium

CVSS3