Логотип exploitDog
bind:CVE-2018-7889
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2018-7889

Количество 4

Количество 4

ubuntu логотип

CVE-2018-7889

почти 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

CVSS3: 7.8
EPSS: Средний
nvd логотип

CVE-2018-7889

почти 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

CVSS3: 7.8
EPSS: Средний
debian логотип

CVE-2018-7889

почти 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on i ...

CVSS3: 7.8
EPSS: Средний
github логотип

GHSA-7hmv-6p8v-7rmw

больше 3 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

CVSS3: 7.8
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2018-7889

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

CVSS3: 7.8
11%
Средний
почти 8 лет назад
nvd логотип
CVE-2018-7889

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

CVSS3: 7.8
11%
Средний
почти 8 лет назад
debian логотип
CVE-2018-7889

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on i ...

CVSS3: 7.8
11%
Средний
почти 8 лет назад
github логотип
GHSA-7hmv-6p8v-7rmw

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

CVSS3: 7.8
11%
Средний
больше 3 лет назад

Уязвимостей на страницу