VDB
GCVE-110-MAGEIA-2024-224
GCVE-110-MAGEIA-2024-224
Advisory Published
Atril Document Viewer is the default document reader of the MATE desktop
environment for Linux. A path traversal and arbitrary file write
vulnerability exists in versions of Atril prior to 1.26.2. This
vulnerability is capable of writing arbitrary files anywhere on the
filesystem to which the user opening a crafted document has access. The
only limitation is that this vulnerability cannot be exploited to
overwrite existing files, but that doesn't stop an attacker from
achieving Remote Command Execution on the target system.
(CVE-2023-52076)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | grub2 | 0 (affected), 2.06-28.4.mga9 (unaffected) | — |
| Mageia | atril | 0 (affected), 1.26.1-1.1.mga9 (unaffected), 1.26.1-1.1.mga9 (unaffected), 0 (affected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.