Published: 24/03/2020 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.3 | Impact Score: 3.4 | Exploitability Score: 1.8

VMScore: 606

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

KDE Okular prior to 1.10.0 allows code execution via an action link in a PDF document.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kde okular
debian debian linux 8.0
fedoraproject fedora 30
fedoraproject fedora 31
fedoraproject fedora 32

Synopsis Moderate: okular security update Type/Severity Security Advisory: Moderate Topic An update for okular is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, whic ...

Debian Bug report logs - #954891 okular: CVE-2020-9359: Local binary execution via action links Package: src:okular; Maintainer for src:okular is Debian Qt/KDE Maintainers <debian-qt-kde@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 24 Mar 2020 21:21:02 UTC Severity: important Ta ...

A security issue has been found in Okular before 1100, that can be tricked into executing local binaries via specially crafted PDF files This binary execution can require almost no user interaction No parameters can be passed to those local binaries ...

NVD-CWE-noinfo https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244 https://kde.org/info/security/advisory-20200312-1.txt https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html https://security.gentoo.org/glsa/202007-47 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/https://access.redhat.com/errata/RHSA-2020:4024 https://nvd.nist.gov https://security.archlinux.org/CVE-2020-9359

CVE-2020-9359

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect