Search for packages
Package details: pkg:deb/ubuntu/atril@1.12.2-1ubuntu0.2
purl pkg:deb/ubuntu/atril@1.12.2-1ubuntu0.2
Next non-vulnerable version 1.12.2-1ubuntu0.3
Latest non-vulnerable version 1.12.2-1ubuntu0.3
Risk 3.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-rj5r-1412-aaas
Aliases:
CVE-2017-1000159
Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.
1.12.2-1ubuntu0.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-jue6-2hcd-aaas backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename. CVE-2017-1000083

Date Actor Action Vulnerability Source VulnerableCode Version