Summary
Felix Wilhelm discovered that Evince did not safely invoke tar when
handling tar comic book (cbt) files. An attacker could use this to
construct a malicious cbt comic book format file that, when opened
in Evince, executes arbitrary code. Please note that this update
disables support for cbt files in Evince.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | evince | 3.10.3-0ubuntu10.3 |
| Ubuntu · 16.04 LTS 16.04:LTS | evince | 3.18.2-1ubuntu4.1 |
Vulnerabilities 1
-
Unscored —
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to …
References
-
report
https://ubuntu.com/security/CVE-2017-1000083