Search for packages
| purl | pkg:deb/debian/atril@1.20.3-1%2Bdeb10u1 |
| Next non-vulnerable version | 1.24.0-1+deb11u1 |
| Latest non-vulnerable version | 1.26.0-2+deb12u3 |
| Risk | 4.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-ayxt-x1mc-aaas
Aliases: CVE-2023-52076 |
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The only limitation is that this vulnerability cannot be exploited to overwrite existing files, but that doesn't stop an attacker from achieving Remote Command Execution on the target system. Version 1.26.2 of Atril contains a patch for this vulnerability. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-g4dd-e3cb-aaaj
Aliases: CVE-2019-11459 |
The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files. |
Affected by 0 other vulnerabilities. |
|
VCID-jrm1-d798-aaam
Aliases: CVE-2023-51698 |
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6. |
Affected by 0 other vulnerabilities. |
|
VCID-jt91-yd9q-aaab
Aliases: CVE-2019-1010006 |
Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-g4dd-e3cb-aaaj | The tiff_document_render() and tiff_document_get_thumbnail() functions in the TIFF document backend in GNOME Evince through 3.32.0 did not handle errors from TIFFReadRGBAImageOriented(), leading to uninitialized memory use when processing certain TIFF image files. |
CVE-2019-11459
|
| VCID-jt91-yd9q-aaab | Evince 3.26.0 is affected by buffer overflow. The impact is: DOS / Possible code execution. The component is: backend/tiff/tiff-document.c. The attack vector is: Victim must open a crafted PDF file. The issue occurs because of an incorrect integer overflow protection mechanism in tiff_document_render and tiff_document_get_thumbnail. |
CVE-2019-1010006
|
| VCID-jue6-2hcd-aaas | backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename. |
CVE-2017-1000083
|
| VCID-rj5r-1412-aaas | Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91. |
CVE-2017-1000159
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T17:49:14.998737+00:00 | Debian Oval Importer | Fixing | VCID-rj5r-1412-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T16:30:28.414140+00:00 | Debian Oval Importer | Fixing | VCID-jt91-yd9q-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T16:28:46.592578+00:00 | Debian Oval Importer | Fixing | VCID-g4dd-e3cb-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:07:12.290538+00:00 | Debian Oval Importer | Fixing | VCID-jue6-2hcd-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T05:07:28.930411+00:00 | Debian Importer | Affected by | VCID-ayxt-x1mc-aaas | https://security-tracker.debian.org/tracker/data/json | 36.1.3 |
| 2025-06-21T04:21:20.878183+00:00 | Debian Oval Importer | Affected by | VCID-jt91-yd9q-aaab | None | 36.1.3 |
| 2025-06-21T02:40:14.265980+00:00 | Debian Oval Importer | Affected by | VCID-g4dd-e3cb-aaaj | None | 36.1.3 |
| 2025-06-21T00:17:33.992473+00:00 | Debian Oval Importer | Fixing | VCID-jt91-yd9q-aaab | None | 36.1.3 |
| 2025-06-20T23:47:29.610753+00:00 | Debian Oval Importer | Fixing | VCID-jue6-2hcd-aaas | None | 36.1.3 |
| 2025-06-20T23:21:07.214315+00:00 | Debian Oval Importer | Fixing | VCID-g4dd-e3cb-aaaj | None | 36.1.3 |
| 2025-06-20T22:17:40.726842+00:00 | Debian Importer | Affected by | VCID-jrm1-d798-aaam | https://security-tracker.debian.org/tracker/data/json | 36.1.3 |
| 2025-06-20T22:16:27.747207+00:00 | Debian Oval Importer | Fixing | VCID-rj5r-1412-aaas | None | 36.1.3 |
| 2025-06-08T11:56:16.289981+00:00 | Debian Oval Importer | Affected by | VCID-jt91-yd9q-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:22:12.359388+00:00 | Debian Oval Importer | Fixing | VCID-rj5r-1412-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T09:16:19.137771+00:00 | Debian Oval Importer | Fixing | VCID-jt91-yd9q-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T09:14:39.747949+00:00 | Debian Oval Importer | Fixing | VCID-g4dd-e3cb-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:02:03.439540+00:00 | Debian Oval Importer | Fixing | VCID-jue6-2hcd-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-07T21:57:29.038363+00:00 | Debian Oval Importer | Affected by | VCID-jt91-yd9q-aaab | None | 36.1.0 |
| 2025-06-07T20:05:13.553207+00:00 | Debian Oval Importer | Affected by | VCID-g4dd-e3cb-aaaj | None | 36.1.0 |
| 2025-06-07T17:40:27.913563+00:00 | Debian Oval Importer | Fixing | VCID-jt91-yd9q-aaab | None | 36.1.0 |
| 2025-06-07T17:10:21.891961+00:00 | Debian Oval Importer | Fixing | VCID-jue6-2hcd-aaas | None | 36.1.0 |
| 2025-06-07T16:44:03.495831+00:00 | Debian Oval Importer | Fixing | VCID-g4dd-e3cb-aaaj | None | 36.1.0 |
| 2025-06-07T15:40:30.267106+00:00 | Debian Oval Importer | Fixing | VCID-rj5r-1412-aaas | None | 36.1.0 |
| 2025-04-13T00:51:44.303561+00:00 | Debian Oval Importer | Affected by | VCID-jrm1-d798-aaam | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-13T00:51:25.793109+00:00 | Debian Oval Importer | Affected by | VCID-ayxt-x1mc-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-12T23:59:46.709327+00:00 | Debian Oval Importer | Affected by | VCID-ayxt-x1mc-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T23:59:16.332236+00:00 | Debian Oval Importer | Affected by | VCID-jrm1-d798-aaam | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T21:51:43.890159+00:00 | Debian Oval Importer | Fixing | VCID-rj5r-1412-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:27:47.916742+00:00 | Debian Oval Importer | Affected by | VCID-g4dd-e3cb-aaaj | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:18:25.576007+00:00 | Debian Oval Importer | Fixing | VCID-jue6-2hcd-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:41:25.196567+00:00 | Debian Oval Importer | Affected by | VCID-jt91-yd9q-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:03:11.697507+00:00 | Debian Oval Importer | Fixing | VCID-rj5r-1412-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T07:48:24.216438+00:00 | Debian Oval Importer | Fixing | VCID-jt91-yd9q-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T07:46:38.994130+00:00 | Debian Oval Importer | Fixing | VCID-g4dd-e3cb-aaaj | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:34:00.583434+00:00 | Debian Oval Importer | Fixing | VCID-jue6-2hcd-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-07T20:28:07.338616+00:00 | Debian Oval Importer | Affected by | VCID-jt91-yd9q-aaab | None | 36.0.0 |
| 2025-04-07T18:42:30.523991+00:00 | Debian Oval Importer | Affected by | VCID-g4dd-e3cb-aaaj | None | 36.0.0 |
| 2025-04-07T16:15:29.801904+00:00 | Debian Oval Importer | Fixing | VCID-jt91-yd9q-aaab | None | 36.0.0 |
| 2025-04-07T15:44:00.698583+00:00 | Debian Oval Importer | Fixing | VCID-jue6-2hcd-aaas | None | 36.0.0 |
| 2025-04-07T15:16:34.042766+00:00 | Debian Oval Importer | Fixing | VCID-g4dd-e3cb-aaaj | None | 36.0.0 |
| 2025-04-07T14:11:23.114129+00:00 | Debian Oval Importer | Fixing | VCID-rj5r-1412-aaas | None | 36.0.0 |
| 2025-04-04T07:56:48.400129+00:00 | Debian Importer | Affected by | VCID-ayxt-x1mc-aaas | https://security-tracker.debian.org/tracker/data/json | 36.0.0 |
| 2025-04-04T00:56:08.014117+00:00 | Debian Importer | Affected by | VCID-jrm1-d798-aaam | https://security-tracker.debian.org/tracker/data/json | 36.0.0 |
| 2025-02-21T15:07:55.360791+00:00 | Debian Importer | Affected by | VCID-ayxt-x1mc-aaas | https://security-tracker.debian.org/tracker/data/json | 35.1.0 |
| 2025-02-21T15:03:38.246166+00:00 | Debian Importer | Affected by | VCID-jrm1-d798-aaam | https://security-tracker.debian.org/tracker/data/json | 35.1.0 |
| 2024-05-20T15:11:49.534169+00:00 | Debian Importer | Affected by | VCID-ayxt-x1mc-aaas | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-05-20T15:09:17.536750+00:00 | Debian Importer | Affected by | VCID-jrm1-d798-aaam | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |