VulnerableCode Package Details - pkg:deb/ubuntu/calibre@2.75.1%2Bdfsg-1

Search for packages

Package details: pkg:deb/ubuntu/calibre@2.75.1%2Bdfsg-1

Essentials
History (0)

purl	pkg:deb/ubuntu/calibre@2.75.1%2Bdfsg-1

Next non-vulnerable version	3.19.0+dfsg-1
Latest non-vulnerable version	3.19.0+dfsg-1
Risk	4.0

Vulnerabilities affecting this package (2)

Vulnerability	Summary	Fixed by
VCID-camm-fnua-aaan Aliases: CVE-2016-10187	The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.	2.75.1+dfsg-1build1~1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-jfsz-6s82-aaas Aliases: CVE-2018-7889	gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.	3.19.0+dfsg-1 Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version