FreeBSD : Okular -- Local binary execution via action links (c3600a64-64ea-11ea-bdff-e0d55e2a8bf9)

Albert Astals Cid : Okular can be tricked into executing local binaries via specially crafted PDF files. This binary execution can require almost no user interaction. No parameters can be passed to those local binaries. We have not been able to identify any binary that will cause actual damage, b...

[ASA-202003-10] okular: arbitrary command execution

Arch Linux Security Advisory ASA-202003-10 ========================================== Severity: Low Date : 2020-03-13 CVE-ID : CVE-2020-9359 Package : okular Type : arbitrary command execution Remote : Yes Link : https://security.archlinux.org/AVG-1113 Summary ======= The package okular before...

PT-2020-5740

Name of the Vulnerable Software and Affected Versions: KDE Okular versions prior to 1.10.0 Description: The issue is related to insufficient input validation in the Okular PDF viewer software, which can be exploited by a remote attacker to gain access to confidential data, compromise data...

Okular -- Local binary execution via action links

Albert Astals Cid: Okular can be tricked into executing local binaries via specially crafted PDF files. This binary execution can require almost no user interaction. No parameters can be passed to those local binaries. We have not been able to identify any binary that will cause actual damage, be...

evince, okular, poppler security update

CentOS Errata and Security Advisory CESA-2019:2022 An update for poppler, evince, and okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives ...

CentOS 7 : evince / okular / poppler (CESA-2019:2022)

An update for poppler, evince, and okular is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

poppler security, bug fix, and enhancement update

evince 3.28.2-8 - Do not free EvDocumentInfo in evwindowsaveprintsettings, - it is freed in EvDocuments destructor - Resolves: 1541358 3.28.2-7 - Do not store page-scaling for documents with enforced - page-scaling - Resolves: 1541358 3.28.2-6 - Use PrintScaling preference stored in PDFs -...

GLSA-201811-08 : Okular: Directory traversal

The remote host is affected by the vulnerability described in GLSA-201811-08 Okular: Directory traversal It was discovered that Okular contains a Directory Traversal vulnerability in function unpackDocumentArchive in core/document.cpp. Impact : A remote attacker could entice a user to open a...

openSUSE Security Update : okular (openSUSE-2019-684)

This update for okular fixes the following security issue : - CVE-2018-1000801: Prevent directory traversal vulnerability in function unpackDocumentArchive could have resulted in arbitrary file creation via a specially crafted Okular archive bsc1107591. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 28 : okular (2018-de7ad09860)

Security fix for CVE-2018-1000801 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Fedora 29 : okular (2018-c504c3072c)

Security fix for CVE-2018-1000801 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Okular: Directory traversal

Background Okular is a universal document viewer based on KPDF for KDE 4. Description It was discovered that Okular contains a Directory Traversal vulnerability in function unpackDocumentArchive in core/document.cpp. Impact A remote attacker could entice a user to open a specially crafted Okular...

Debian DSA-4303-1 : okular - security update

Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files annotated document archives, which could result in the creation of arbitrary files. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Debian DLA-1516-1 : okular security update

Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files annotated document archives, which could result in the creation of arbitrary files. For Debian 8 'Jessie', this problem has been fixed in version 4:4.14.2-2+deb8u1. We recomme...

[SECURITY] [DLA 1516-1] okular security update

Package : okular Version : 4:4.14.2-2+deb8u1 CVE ID : CVE-2018-1000801 Joran Herve discovered that the Okular document viewer was susceptible to directory traversal via malformed .okular files annotated document archives, which could result in the creation of arbitrary files. For Debian 8 "Jessie...

[SECURITY] [DSA 4303-1] okular security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4303-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 23, 2018 https://www.debian.org/security/faq -...

DLA-1516-1 okular - security update

Bulletin has no description...

DSA-4303-1 okular - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1516-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for okular (moderate)

This update for okular fixes the following security issue: - CVE-2018-1000801: Prevent directory traversal vulnerability in function unpackDocumentArchive could have resulted in arbitrary file creation via a specially crafted Okular archive bsc1107591...