Summary
It was discovered that Okular mishandled certain crafted archives during
extraction. An attacker could use this vulnerability to write arbitrary
files to the filesystem.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | okular | 4:17.12.3-0ubuntu1+esm1 |
Vulnerabilities 1
-
Unscored —
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" …
References
-
report
https://ubuntu.com/security/CVE-2018-1000801