Published: 06/09/2018 Updated: 20/03/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

okular version 18.08 and previous versions contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1

Vulnerable Product	Search on Vulmon	Subscribe to Product
kde okular
debian debian linux 8.0
debian debian linux 9.0

Synopsis Moderate: okular security update Type/Severity Security Advisory: Moderate Topic An update for okular is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, whic ...

Debian Bug report logs - #908168 okular: CVE-2018-1000801 Package: src:okular; Maintainer for src:okular is Debian Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 6 Sep 2018 21:18:01 UTC Owned by: Simon Quigley <tsimonq2@ubuntucom> Severity: ...

A path traversal vulnerability has been discovered in Okular, in the way it creates temporary files when reading an Okular archive Paths are read from contentxml and they are not properly sanitized before being used as template file names for the temporary files created when extracting the Okular archive, thus allowing a local attacker to write f ...

CWE-22 https://cgit.kde.org/okular.git/commit/?id=8ff7abc14d41906ad978b6bc67e69693863b9d47 https://bugs.kde.org/show_bug.cgi?id=398096 https://www.debian.org/security/2018/dsa-4303 https://lists.debian.org/debian-lts-announce/2018/09/msg00027.html https://security.gentoo.org/glsa/201811-08 https://access.redhat.com/errata/RHSA-2020:1173 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2018-1000801

CVE-2018-1000801

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect