Lucene search
+L

1 matches found

OSV
OSV
added 2017/08/05 7:19 p.m.11 views

MGASA-2017-0244 Updated evince packages fix security vulnerability

Felix Wilhelm discovered that Evince did not safely invoke tar when handling tar comic book cbt files. An attacker could use this to construct a malicious cbt comic book format file that, when opened in Evince, executes arbitrary code. Please note that this update disables support for cbt files i...

7.8CVSS7.4AI score0.50826EPSS
SaveExploits9References3
Rows per page
Query Builder