Log in Start free

Vulnerability · Published Jan 12, 2024 · Assigned by GitHub_M

CVE-2023-51698Atril's CBT comic book parsing vulnerable to Remote Code Execution

Critical 9.6

In plain English

A critical-severity OS command injection in atril from mate-desktop. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.6Critical
Exploit odds (30 days)2.4%top 16.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC

Official description

Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12atril1.26.0-2+deb12u2DEBIAN-CVE-2023-51698
Debian:13atril1.26.1-4DEBIAN-CVE-2023-51698
Debian:14atril1.26.1-4DEBIAN-CVE-2023-51698
Debian:12evince3.25.92-1DEBIAN-CVE-2023-51698
Debian:13evince3.25.92-1DEBIAN-CVE-2023-51698
Ubuntu:22.04:LTSatril1.26.0-1ubuntu1.2USN-7274-1
Ubuntu:22.04:LTSatril1.26.0-1ubuntu1.2UBUNTU-CVE-2023-51698

Affected products (as reported)

VendorProductVersions
mate-desktop atril <= 1.26.3

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

References