Atril's CBT comic book parsing vulnerable to Remote Code Execution
Résumé
Atril's CBT comic book parsing vulnerable to Remote Code Execution
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-51698 atril Corrigé dans: 1.24.0-1+deb11u1
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org