CVE-2023-51698

CVSS V2 None CVSS V3 None
Description
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
Overview
  • CVE ID
  • CVE-2023-51698
  • Assigner
  • GitHub_M
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-01-12T20:27:31.551Z
  • Last Modified Date
  • 2024-01-12T20:27:31.551Z
Weakness Enumerations
CWE URL
CWE-78 http://cwe.mitre.org/data/definitions/78.html
References
Reference URL Reference Tags
https://github.com/mate-desktop/atril/security/advisories/GHSA-34rr-j8v9-v4p2 x_refsource_CONFIRM
https://github.com/mate-desktop/atril/commit/ce41df6467521ff9fd4f16514ae7d6ebb62eb1ed x_refsource_MISC
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZKXNZ3HGH6KH65OEKVCEAOZJWNZ32FQ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OT3UIQOSZ6UNH5QTFOOY2DJ4MITM2C2C/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-51698
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-51698
History
Created Old Value New Value Data Type Notes
2024-06-24 18:49:55 Added to TrackCVE