CVE-2023-51698
Atril's CBT comic book parsing vulnerable to Remote Code Execution
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Atril's CBT comic book parsing vulnerable to Remote Code Execution
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
- Record
CVE-2023-51698- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2023-56398
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
- Record
EUVD-2023-56398- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
NVD
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
- Record
CVE-2023-51698- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
OSV
Atril's CBT comic book parsing vulnerable to Remote Code Execution
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
- Record
CVE-2023-51698- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Weakness
- CWE-78
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-51698
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
- Record
DEBIAN-CVE-2023-51698- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2024-1492
atril security update
Mate-document-viewer is simple document viewer. It can display and print Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS), DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents bookmarks and editing of forms.
Security Fix(es):
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6. (CVE-2023-51698)
Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The only limitation is that this vulnerability cannot be exploited to overwrite existing files, but that doesn't stop an attacker from achieving Remote Command Execution on the target system. Version 1.26.2 of Atril contains a patch for this vulnerability.(CVE-2023-52076)
- Record
OESA-2024-1492- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
Show 8 moreShow less
OSVOESA-2024-1493
atril security update
Mate-document-viewer is simple document viewer. It can display and print Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS), DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents bookmarks and editing of forms.
Security Fix(es):
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6. (CVE-2023-51698)
- Record
OESA-2024-1493- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVOESA-2024-1521
atril security update
Mate-document-viewer is simple document viewer. It can display and print Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS), DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents bookmarks and editing of forms.
Security Fix(es):
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6. (CVE-2023-51698)
- Record
OESA-2024-1521- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVOESA-2024-1522
atril security update
Mate-document-viewer is simple document viewer. It can display and print Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS), DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents bookmarks and editing of forms.
Security Fix(es):
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6. (CVE-2023-51698)
- Record
OESA-2024-1522- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVOESA-2024-1523
atril security update
Mate-document-viewer is simple document viewer. It can display and print Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS), DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents bookmarks and editing of forms.
Security Fix(es):
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6. (CVE-2023-51698)
- Record
OESA-2024-1523- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVOESA-2024-1612
atril security update
Mate-document-viewer is simple document viewer. It can display and print Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS), DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard, hypertext navigation, table-of-contents bookmarks and editing of forms.
Security Fix(es):
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6. (CVE-2023-51698)
- Record
OESA-2024-1612- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-51698
Atril is a simple multi-page document viewer. Atril is vulnerable to a critical Command Injection Vulnerability. This vulnerability gives the attacker immediate access to the target system when the target user opens a crafted document or clicks on a crafted link/URL using a maliciously crafted CBT document which is a TAR archive. A patch is available at commit ce41df6.
- Record
UBUNTU-CVE-2023-51698- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13614-1 No score
atril-1.26.1-2.1 on GA media
These are all security issues fixed in the atril-1.26.1-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13614-1- Updated
- 2026-11-02
OSVUSN-7274-1 No score
atril vulnerabilities
It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-1010006)
Andy Nguyen discovered that Atril incorrectly handled certain images. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-11459)
Febin Mon Saji discovered that Atril incorrectly handled certain compressed files. A remote attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. (CVE-2023-51698)
- Record
USN-7274-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
atrilDebian:12 |
before 1.26.0-2+deb12u2, plus listed versions 1.26.0-21.26.0-2+deb12u1 |
1.26.0-2+deb12u2 |
atrilDebian:13 |
before 1.26.1-4 | 1.26.1-4 |
atrilDebian:14 |
before 1.26.1-4 | 1.26.1-4 |
evinceDebian:12 |
before 3.25.92-1 | 3.25.92-1 |
evinceDebian:13 |
before 3.25.92-1 | 3.25.92-1 |
atrilopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 1.22.3-4.oe1 | 1.22.3-4.oe1 |
atrilopenEuler:22.03-LTS |
before 1.22.3-4.oe2203 | 1.22.3-4.oe2203 |
atrilopenEuler:22.03-LTS-SP3 |
before 1.22.3-4.oe2203sp3 | 1.22.3-4.oe2203sp3 |
atrilopenEuler:20.03-LTS-SP4 |
before 1.22.3-4.oe2003sp4 | 1.22.3-4.oe2003sp4 |
atrilopenEuler:22.03-LTS-SP1 |
before 1.22.3-4.oe2203sp1 | 1.22.3-4.oe2203sp1 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
atrilopenEuler:22.03-LTS-SP2 |
before 1.22.3-4.oe2203sp2 | 1.22.3-4.oe2203sp2 |
atrilUbuntu:Pro:18.04:LTS |
before 1.20.1-2ubuntu2+esm2, plus listed versions 1.18.1-11.18.3-11.19.6-0ubuntu11.20.0-0ubuntu11.20.1-0ubuntu1 Show 4 moreShow less1.20.1-11.20.1-2ubuntu11.20.1-2ubuntu21.20.1-2ubuntu2+esm1 |
1.20.1-2ubuntu2+esm2 |
atrilUbuntu:20.04:LTS |
before 1.24.0-1ubuntu0.2, plus listed versions 1.22.2-0ubuntu11.24.0-0ubuntu11.24.0-11.24.0-1ubuntu0.1 |
1.24.0-1ubuntu0.2 |
atrilUbuntu:22.04:LTS |
before 1.26.0-1ubuntu1.2, plus listed versions 1.26.0-0ubuntu11.26.0-1ubuntu11.26.0-1ubuntu1.1 |
1.26.0-1ubuntu1.2 |
atrilUbuntu:Pro:18.04:LTS From an advisory covering 3 CVEs |
before 1.20.1-2ubuntu2+esm2, plus listed versions 1.18.1-11.18.3-11.19.6-0ubuntu11.20.0-0ubuntu11.20.1-0ubuntu1 Show 4 moreShow less1.20.1-11.20.1-2ubuntu11.20.1-2ubuntu21.20.1-2ubuntu2+esm1 |
1.20.1-2ubuntu2+esm2 |
atrilUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 1.24.0-1ubuntu0.2, plus listed versions 1.22.2-0ubuntu11.24.0-0ubuntu11.24.0-11.24.0-1ubuntu0.1 |
1.24.0-1ubuntu0.2 |
atrilUbuntu:22.04:LTS From an advisory covering 3 CVEs |
before 1.26.0-1ubuntu1.2, plus listed versions 1.26.0-0ubuntu11.26.0-1ubuntu11.26.0-1ubuntu1.1 |
1.26.0-1ubuntu1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-51698 is a critical vulnerability (CVSS 9.6) in Mate-desktop Atril, published January 12, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.36%, the 83rd percentile. Fixed in atril 1.26.0-2+deb12u2.
References
github.com/mate-desktop/atril/security/advisories/GHSA-34rr-j8v9-v4p2
lists.fedoraproject.org/archives/list/[email protected]/message/OZKXNZ3HGH6KH65OEKVCEAOZJWNZ32FQ
nvd.nist.gov/vuln/detail/CVE-2023-51698
Show 14 moreShow less
security-tracker.debian.org/tracker/CVE-2023-51698
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1492
ubuntu.com/security/CVE-2023-51698
cve.org/CVERecord?id=CVE-2023-51698
suse.com/security/cve/CVE-2023-51698