backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade evince | Sep 20, 2017 | Sep 5, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 5, 2017 |
| Centos_linux | — | Upgrade evince-browser-pluginUpgrade evince-libsUpgrade evince-debuginfoUpgrade evinceUpgrade evince-nautilusUpgrade evince-dviUpgrade evince-devel | Aug 28, 2019 | Sep 5, 2017 |
| Debian | — | Upgrade evinceUpgrade atril | Jul 15, 2017 | Jul 14, 2017 |
| Freebsd | — | Upgrade evince-liteUpgrade atril-liteUpgrade evinceUpgrade atril | Aug 22, 2017 | Jul 13, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade evinceUpgrade evince-nautilusUpgrade evince-libsUpgrade evince-dvi | Nov 30, 2017 | Sep 5, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade evinceUpgrade evince-libsUpgrade evince-dviUpgrade evince-nautilus | Nov 30, 2017 | Sep 5, 2017 |
| Oracle Solaris | — | Upgrade desktop/pdf-viewer/evince to version 2.30.3-0.175.3.31.0.4.0 on Solaris 11.3Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Jul 18, 2018 | Sep 5, 2017 |
| Oracle_linux | — | Upgrade evince-develUpgrade evinceUpgrade evince-libsUpgrade evince-browser-pluginUpgrade evince-nautilusUpgrade evince-dvi | Aug 9, 2017 | Jul 13, 2017 |
| Redhat_linux | — | Upgrade evince-browser-pluginUpgrade evince-libsUpgrade evince-nautilusUpgrade evinceUpgrade evince-debuginfoUpgrade evince-develUpgrade evince-dvi | Aug 3, 2017 | Jul 14, 2017 |
| Suse | — | Upgrade evince-plugin-tiffdocumentUpgrade evince-plugin-pdfdocumentUpgrade evince-develUpgrade typelib-1_0-EvinceView-3_0Upgrade evince-plugin-dvidocumentUpgrade evince-langUpgrade evince-browser-pluginUpgrade evince-plugin-xpsdocumentUpgrade evinceUpgrade libevdocument3-4Upgrade libevview3-3Upgrade evince-plugin-djvudocumentUpgrade evince-plugin-psdocumentUpgrade nautilus-evinceUpgrade typelib-1_0-EvinceDocument-3_0 | Jul 18, 2017 | Jul 14, 2017 |
| Ubuntu | — | Upgrade evinceUpgrade evince-common | Dec 20, 2017 | Jul 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub