Every CVE Search/ Get API key

CVE-2017-1000083

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1...

7.8 HighPublic exploitFix available

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

51.1%Down 7.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

Record
CVE-2017-1000083
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

Record
CVE-2017-1000083
Updated
2026-11-02
EUVDEUVD-2017-1400 No score

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

Record
EUVD-2017-1400
Updated
2026-11-03
GitHub AdvisoriesGHSA-c796-cmwx-5c79 7.8

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1...

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

Record
GHSA-c796-cmwx-5c79
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

Record
CVE-2017-1000083
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-1000083 7.8

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

Record
DEBIAN-CVE-2017-1000083
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2017:2388 7.1

Red Hat Security Advisory: evince security update

Record
RHSA-2017:2388
CVSS 3.0
7.1 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2017-1000083 7.8

backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.

Record
UBUNTU-CVE-2017-1000083
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2017-0244 No score

Updated evince packages fix security vulnerability

Felix Wilhelm discovered that Evince did not safely invoke tar when handling tar comic book (cbt) files. An attacker could use this to construct a malicious cbt comic book format file that, when opened in Evince, executes arbitrary code. Please note that this update disables support for cbt files in Evince (CVE-2017-1000083).

Record
MGASA-2017-0244
Updated
2026-11-02
OSVMGASA-2017-0251 No score

Updated atril packages fix security vulnerability

It was discovered that Atril made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely (CVE-2017-1000083).

Record
MGASA-2017-0251
Updated
2026-11-02
OSVopenSUSE-SU-2024:10742-1 No score

evince-40.4-1.3 on GA media

These are all security issues fixed in the evince-40.4-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10742-1
Updated
2026-11-02
OSVSUSE-SU-2017:1893-1 No score

Security update for evince

This update for evince fixes the following issues:

  • CVE-2017-1000083: Remote attackers could have used the comicbook mode of evince to inject shell code. (bsc#1046856, bgo#784630)
Record
SUSE-SU-2017:1893-1
Updated
2026-11-02
OSVSUSE-SU-2017:1894-1 No score

Security update for evince

This update for evince fixes the following issues:

  • CVE-2017-1000083: Remote attackers could have used the comicbook mode of evince to inject shell code. (bsc#1046856, bgo#784630)
Record
SUSE-SU-2017:1894-1
Updated
2026-11-02
OSVSUSE-SU-2017:2390-1 No score

Security update for evince

This update for evince fixes the following issue:

  • CVE-2017-1000083: Remote attackers could have used the comicbook mode of evince to inject shell code (bsc#1046856).
Record
SUSE-SU-2017:2390-1
Updated
2026-11-02
OSVSUSE-SU-2017:3428-1 No score

Security update for evince

This update for evince fixes the following issues:

Security issue fixed:

  • CVE-2017-1000083: Remove support for tar and tar-like commands in comics backend (bsc#1046856).
Record
SUSE-SU-2017:3428-1
Updated
2026-11-02
OSVUSN-3351-1 No score

evince vulnerability

Felix Wilhelm discovered that Evince did not safely invoke tar when handling tar comic book (cbt) files. An attacker could use this to construct a malicious cbt comic book format file that, when opened in Evince, executes arbitrary code. Please note that this update disables support for cbt files in Evince.

Record
USN-3351-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
atril
Debian:12
 before 1.16.1-2.1
1.16.1-2.1
atril
Debian:13
 before 1.16.1-2.1
1.16.1-2.1
atril
Debian:14
 before 1.16.1-2.1
1.16.1-2.1
evince
Debian:12
 before 3.22.1-4
3.22.1-4
evince
Debian:13
 before 3.22.1-4
3.22.1-4
evince
Debian:7
 before 3.4.0-3.1+deb7u1, plus listed versions
3.4.0-3.1
3.4.0-3.1+deb7u1
evince
Debian:8
 before 3.14.1-2+deb8u2, plus listed versions
3.14.1-23.14.1-2+deb8u1
3.14.1-2+deb8u2
evince
Debian:9
 before 3.22.1-3+deb9u1, plus listed versions
3.22.1-3
3.22.1-3+deb9u1
atril
Debian:8
 before 1.8.1+dfsg1-4+deb8u1, plus listed versions
1.8.1+dfsg1-4
1.8.1+dfsg1-4+deb8u1
atril
Debian:9
 before 1.16.1-2+deb9u1, plus listed versions
1.16.1-2
1.16.1-2+deb9u1
Show 62 moreShow less
Affected packages
PackageAffectedFixed
evince
Mageia:5
 before 3.14.2-1.1.mga5
3.14.2-1.1.mga5
evince
Mageia:6
 before 3.24.1-1.mga6
3.24.1-1.mga6
atril
Mageia:5
 before 1.8.1-3.1.mga5
1.8.1-3.1.mga5
atril
Mageia:6
 before 1.18.0-1.1.mga6
1.18.0-1.1.mga6
evince
Red Hat:enterprise_linux:7::client
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-dvi
Red Hat:enterprise_linux:7::client
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-libs
Red Hat:enterprise_linux:7::client
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-nautilus
Red Hat:enterprise_linux:7::client
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-browser-plugin
Red Hat:enterprise_linux:7::client
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-devel
Red Hat:enterprise_linux:7::client
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince
Red Hat:enterprise_linux:7::server
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-dvi
Red Hat:enterprise_linux:7::server
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-libs
Red Hat:enterprise_linux:7::server
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-nautilus
Red Hat:enterprise_linux:7::server
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-browser-plugin
Red Hat:enterprise_linux:7::server
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-devel
Red Hat:enterprise_linux:7::server
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince
Red Hat:enterprise_linux:7::workstation
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-dvi
Red Hat:enterprise_linux:7::workstation
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-libs
Red Hat:enterprise_linux:7::workstation
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-nautilus
Red Hat:enterprise_linux:7::workstation
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-browser-plugin
Red Hat:enterprise_linux:7::workstation
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.22.1-5.2.el7_4
0:3.22.1-5.2.el7_4
evince
SUSE:Linux Enterprise Desktop 12 SP2
 before 3.20.1-6.14.1
3.20.1-6.14.1
evince
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 3.20.1-6.14.1
3.20.1-6.14.1
evince
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 3.20.1-6.14.1
3.20.1-6.14.1
evince
SUSE:Linux Enterprise Server 12 SP2
 before 3.20.1-6.14.1
3.20.1-6.14.1
evince
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 3.20.1-6.14.1
3.20.1-6.14.1
evince
SUSE:Linux Enterprise Workstation Extension 12 SP2
 before 3.20.1-6.14.1
3.20.1-6.14.1
evince
SUSE:OpenStack Cloud 6
 before 3.10.3-2.3.1
3.10.3-2.3.1
evince
SUSE:Linux Enterprise Server for SAP Applications 12
 before 3.10.3-2.3.1
3.10.3-2.3.1
evince
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 3.10.3-2.3.1
3.10.3-2.3.1
evince
SUSE:Linux Enterprise Server 12-LTSS
 before 3.10.3-2.3.1
3.10.3-2.3.1
evince
SUSE:Linux Enterprise Server 12 SP1-LTSS
 before 3.10.3-2.3.1
3.10.3-2.3.1
evince
SUSE:Linux Enterprise Desktop 12 SP2
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Desktop 12 SP3
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Server 12 SP2
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Server 12 SP3
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Workstation Extension 12 SP2
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Workstation Extension 12 SP3
 before 3.20.1-6.16.1
3.20.1-6.16.1
evince
SUSE:Linux Enterprise Desktop 12 SP2
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Desktop 12 SP3
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Software Development Kit 12 SP3
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Server 12 SP2
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Server 12 SP3
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Workstation Extension 12 SP2
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
SUSE:Linux Enterprise Workstation Extension 12 SP3
 before 3.20.2-6.19.15
3.20.2-6.19.15
evince
Ubuntu:14.04:LTS
 before 3.10.3-0ubuntu10.3, plus listed versions
3.10.0-0ubuntu23.10.0-0ubuntu33.10.2-0ubuntu13.10.3-0ubuntu13.10.3-0ubuntu2
Show 10 moreShow less
3.10.3-0ubuntu33.10.3-0ubuntu43.10.3-0ubuntu53.10.3-0ubuntu63.10.3-0ubuntu73.10.3-0ubuntu83.10.3-0ubuntu93.10.3-0ubuntu103.10.3-0ubuntu10.13.10.3-0ubuntu10.2
3.10.3-0ubuntu10.3
atril
Ubuntu:16.04:LTS
 before 1.12.2-1ubuntu0.2, plus listed versions
1.10.2+repack1-11.12.2-11.12.2-1ubuntu0.1
1.12.2-1ubuntu0.2
evince
Ubuntu:16.04:LTS
 before 3.18.2-1ubuntu4.1, plus listed versions
3.16.1-0ubuntu13.18.1-1ubuntu13.18.1-1ubuntu23.18.2-1ubuntu13.18.2-1ubuntu23.18.2-1ubuntu33.18.2-1ubuntu4
3.18.2-1ubuntu4.1
evince
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 40.4-1.3
40.4-1.3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitEvince CBT File Command Injection2017-07-13
PoC in GitHubmatlink/cve-2017-1000083-atril-nautilus2018-10-30
PoC in GitHubmatlink/evince-cve-2017-10000832018-10-30
Exploit-DBEvince 3.24.0 - Command Injection2018-11-13
Exploit-DBEvince - CBT File Command Injection (Metasploit)2019-02-11

History

History
RecordedChangedSources
affected, exploits, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-1000083 is a high vulnerability (CVSS 7.8) in Gnome Evince, published July 13, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 51.1%, the 98th percentile. Fixed in atril 1.16.1-2.1.

References

Show 27 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open