VDB

GCVE-VVD-MAGEIA-2017-244

GCVE-VVD-MAGEIA-2017-244
Advisory Published
Vulnetix · Advisory published August 5, 2017
Felix Wilhelm discovered that Evince did not safely invoke tar when handling tar comic book (cbt) files. An attacker could use this to construct a malicious cbt comic book format file that, when opened in Evince, executes arbitrary code. Please note that this update disables support for cbt files in Evince (CVE-2017-1000083).

Affected Products

VendorProductVersionsPlatforms
Mageiaevince0 (affected), 3.14.2-1.1.mga5 (unaffected)—
Mageiaevince0 (affected), 3.24.1-1.mga6 (unaffected)—

Browse GCVE Records

20,181 records in the GCVE database · Updated October 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›