CVE-2023-51698
Atril's CBT comic book parsing vulnerable to Remote Code Execution
概要
Atril's CBT comic book parsing vulnerable to Remote Code Execution
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-51698 atril 修正版: 1.24.0-1+deb11u1
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org