Search for packages
Package details: pkg:alpm/archlinux/evince@3.24.0%2B8%2Bga8363215-1
purl pkg:alpm/archlinux/evince@3.24.0%2B8%2Bga8363215-1
Next non-vulnerable version 3.24.0+12+g717df38f-1
Latest non-vulnerable version 3.24.0+12+g717df38f-1
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-jue6-2hcd-aaas
Aliases:
CVE-2017-1000083
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
3.24.0+12+g717df38f-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:47.048664+00:00 Arch Linux Importer Affected by VCID-jue6-2hcd-aaas https://security.archlinux.org/AVG-348 36.0.0
2024-09-18T01:59:48.506544+00:00 Arch Linux Importer Affected by VCID-jue6-2hcd-aaas https://security.archlinux.org/AVG-348 34.0.1
2024-01-03T22:26:04.426339+00:00 Arch Linux Importer Affected by VCID-jue6-2hcd-aaas https://security.archlinux.org/AVG-348 34.0.0rc1