Lucene search

K
redosRedosROS-20240418-05
HistoryApr 18, 2024 - 12:00 a.m.

ROS-20240418-05

2024-04-1800:00:00
redos.red-soft.ru
2
xreader
e-document viewer
vulnerability
code execution
system call
epub
cbt
unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.0%

A vulnerability in the Xreader e-document viewer software is related to the lack of
failure to properly validate a user-entered string before using it to make a system call.
call. Exploitation of the vulnerability could allow an attacker to execute arbitrary code

A vulnerability in the Xreader e-document viewer software is related to an incorrect
path name restriction to a restricted directory. Exploitation of the vulnerability could allow an attacker to
an attacker to execute arbitrary code by allowing a user to open a specially crafted EPUB or
CBT file

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64xreader<= 3.8.5-1UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

29.0%