Lucene search

K
osvGoogleOSV:CVE-2018-7889
HistoryMar 08, 2018 - 9:29 p.m.

CVE-2018-7889

2018-03-0821:29:00
Google
osv.dev
103

AI Score

8.1

Confidence

Low

EPSS

0.006

Percentile

79.5%

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

AI Score

8.1

Confidence

Low

EPSS

0.006

Percentile

79.5%