Skip to content
OpenAdvisories
Unscored USN-4085-1 1 CVE

Sigil vulnerability

Published Aug 1, 2019 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Mike Salvatore discovered that Sigil mishandled certain malformed EPUB
files. An attacker could use this vulnerability to write arbitrary files to
the filesystem.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS sigil 0.9.5+dfsg-0ubuntu1+esm1
Ubuntu · 18.04 LTS 18.04:LTS sigil 0.9.9+dfsg-1ubuntu0.1~esm1

Vulnerabilities 1

  • Unscored —
    CVE-2019-14452

    Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot …

    sigil sigil Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2019-14452