Home

CVE-2017-1000159

Description

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.359

Associated Vulnerability

VulnerabilityOS Platform
Document viewer (USN-3503-1) evince_3.24.0-0ubuntu1.3_i386.debLinux
Document viewer (USN-3503-1) evince_3.24.0-0ubuntu1.3_amd64.debLinux
Document viewer (USN-3503-1) evince_3.10.3-0ubuntu10.4_i386.debLinux
Document viewer (USN-3503-1) evince_3.10.3-0ubuntu10.4_amd64.debLinux
Document viewer (USN-3503-1) evince-common_3.24.0-0ubuntu1.3_all.debLinux
Document viewer (USN-3503-1) evince-common_3.10.3-0ubuntu10.4_all.debLinux
SUSE-SU-2018:0639-1(SUSE Linux Enterprise Server 11-SP4 ) evince-2.28.2-0.7.3.1.x86_64.rpmLinux
SUSE-SU-2018:0639-1(SUSE Linux Enterprise Server 11-SP4 ) evince-doc-2.28.2-0.7.3.1.x86_64.rpmLinux
SUSE-SU-2018:0639-1(SUSE Linux Enterprise Server 11-SP4 ) evince-lang-2.28.2-0.7.3.1.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) nautilus-evince-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-browser-plugin-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-browser-plugin-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-debugsource-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-lang-3.20.2-6.22.9.noarch.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-djvudocument-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-djvudocument-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-dvidocument-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-dvidocument-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-pdfdocument-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-pdfdocument-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-psdocument-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-psdocument-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-tiffdocument-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-tiffdocument-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-xpsdocument-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) evince-plugin-xpsdocument-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) libevdocument3-4-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) libevdocument3-4-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) libevview3-3-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) libevview3-3-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) nautilus-evince-debuginfo-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) typelib-1_0-EvinceDocument-3_0-3.20.2-6.22.9.x86_64.rpmLinux
SUSE-SU-2018:0947-1(SUSE Linux Enterprise Desktop 12-SP3 ) typelib-1_0-EvinceView-3_0-3.20.2-6.22.9.x86_64.rpmLinux
evince security update(DSA-4624-1) evince_3.22.1-3+deb9u2_i386.debLinux
evince security update(DSA-4624-1) evince_3.22.1-3+deb9u2_amd64.debLinux
evince security update(DSA-4624-1) evince_3.30.2-3+deb10u1_i386.debLinux
evince security update(DSA-4624-1) evince_3.30.2-3+deb10u1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234