CRITICAL🇵🇱 Wersja polska

CVE-2023-51698

CVSS 9.6v3.1pub. 2024-01-12upd. 2025-04-10

Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

  • Mate Desktop Atril

    APP
    Mate-Desktop
    ≤ 1.26.3
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2023-52076HIGH8.5ten sam produkt

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path travers...

CVE-2023-52138HIGH8.2ten sam vendor

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversa...

CVE-2018-20681MEDIUM6.1ten sam vendor

mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view scree...

CVE-2012-5560LOW2.1ten sam vendor

The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the syst...