PT-2024-4537 · Unknown+4 · Atril Document Viewer+4

Febinrev · Published 2024-01-18 · Updated 2025-01-24 · CVE-2023-52076

Positive Technologies (AI Summary)

CVSS v3.1

8.5

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions: Atril Document Viewer versions prior to 1.26.2

Description: A path traversal and arbitrary file write issue exists in Atril Document Viewer, allowing an attacker to write arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The limitation of this issue is that it cannot be exploited to overwrite existing files. However, this does not prevent an attacker from achieving Remote Command Execution on the target system.

Recommendations: For versions prior to 1.26.2, update to version 1.26.2 or later to patch the vulnerability. As a temporary workaround, consider restricting access to crafted documents to minimize the risk of exploitation. Avoid using Atril Document Viewer to open documents from untrusted sources until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-25

CWE-27

CWE-22

CWE-24

Related Identifiers

ALT-PU-2023-8439

ALT-PU-2024-12527

BDU:2024-05041

CVE-2023-52076

DLA-3828-1

DSA-5688-1

GHSA-6MF6-MXPC-JC37

MGASA-2024-0224

OESA-2024-1245

OESA-2024-1246

OESA-2024-1247

OESA-2024-1248

OESA-2024-1249

OESA-2024-1492

USN-6808-1

Affected Products

Alt Linux

Atril Document Viewer

Linuxmint

Red Os

Ubuntu

References · 44

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52076.json · Exploit
• 🔥 https://github.com/mate-desktop/atril/security/advisories/GHSA-6mf6-mxpc-jc37 · Exploit
• https://github.com/mate-desktop/atril/commit/e70b21c815418a1e6ebedf6d8d31b8477c03ba50 · Patch
• https://osv.dev/vulnerability/OESA-2024-1246 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-51698 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52076 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1247 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52076 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1492 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5688-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52076 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52076 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0224.html · Security Note
• https://osv.dev/vulnerability/DLA-3828-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05041 · Security Note