2 matches found
evince: command injection via filename in tar-compressed comics archive
It was found that evince did not properly sanitize the command line which is run to untar Comic Book Tar CBT files, thereby allowing command injection. A specially crafted CBT file, when opened by evince or evince-thumbnailer, could execute arbitrary commands in the context of the evince program...
7.8CVSS6.1AI score0.50826EPSS
SaveExploits9References4
CVE-2017-1000083
It was found that evince did not properly sanitize the command line which is run to untar Comic Book Tar CBT files, thereby allowing command injection. A specially crafted CBT file, when opened by evince or evince-thumbnailer, could execute arbitrary commands in the context of the evince program...
7.8CVSS4.2AI score0.50826EPSS
SaveExploits9References1
20