GCVE-VVD-MAGEIA-2017-244 — Vulnetix

Try Vulnetix Request Demo

GCVE-VVD-MAGEIA-2017-244

Advisory Published

Vulnetix · Advisory published August 5, 2017

Felix Wilhelm discovered that Evince did not safely invoke tar when handling tar comic book (cbt) files. An attacker could use this to construct a malicious cbt comic book format file that, when opened in Evince, executes arbitrary code. Please note that this update disables support for cbt files in Evince (CVE-2017-1000083).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	evince	0 (affected), 3.14.2-1.1.mga5 (unaffected)	—
Mageia	evince	0 (affected), 3.24.1-1.mga6 (unaffected)	—

Aliases

CVE-2017-1000083

Transitive aliases

GHSA-c796-cmwx-5c79 VVD-MAGEIA-2017-251 BDU:2018-00111 EUVD-2017-1400 VVD-GENTOO-2017-624882

References

Updated evince packages fix security vulnerability

advisory

Updated evince packages fix security vulnerability

issue

Updated evince packages fix security vulnerability

advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON