PT-2018-9527 · Kde+5 · Okular+5
Joran Herve
·
Publicado
2018-09-06
·
Atualizado
2024-06-15
·
CVE-2018-1000801
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
okular versions prior to 18.08.1
Description
The issue is related to a Directory Traversal vulnerability in the
unpackDocumentArchive(...) function located in core/document.cpp. This can lead to Arbitrary file creation on the user workstation. The attack is exploitable when the victim opens a specially crafted Okular archive.Recommendations
For okular versions prior to 18.08.1, update to version 18.08.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the
unpackDocumentArchive(...) function until a patch is available. Restrict access to specially crafted Okular archives to minimize the risk of exploitation.Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Okular
Red Hat
Suse
Ubuntu