Search for packages
Package details: pkg:deb/ubuntu/atril@1.8.0%2Bdfsg1-4
purl pkg:deb/ubuntu/atril@1.8.0%2Bdfsg1-4
Next non-vulnerable version 1.12.2-1ubuntu0.3
Latest non-vulnerable version 1.12.2-1ubuntu0.3
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-jue6-2hcd-aaas
Aliases:
CVE-2017-1000083
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
1.12.2-1ubuntu0.2
Affected by 1 other vulnerability.
VCID-rj5r-1412-aaas
Aliases:
CVE-2017-1000159
Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.
1.12.2-1ubuntu0.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version