PT-2017-3346 · Gnome+5 · Gnome Evince+5
Felix Wilhelm
·
Publicado
2017-07-13
·
Atualizado
2024-06-15
·
CVE-2017-1000083
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GNOME Evince versions prior to 3.24.1
Description
The issue allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring. This can be demonstrated by a filename starting with --checkpoint-action=exec=bash at the beginning of the filename. The vulnerability is related to the failure to neutralize special elements used in a command.
Recommendations
For versions prior to 3.24.1, update to version 3.24.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of .cbt files that are TAR archives containing filenames starting with the "--" command-line option substring. Restrict access to the comic book backend to minimize the risk of exploitation.
Exploit
Correção
Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Gnome Evince
Red Hat
Suse
Ubuntu