Remote Code Execution Vulnerability in GNOME Evince PDF Viewer

CVE-2017-1000083

Summary

A vulnerability exists in the backend/comics/comics-document.c of GNOME Evince versions prior to 3.24.1 that allows remote attackers to execute arbitrary commands. This can be exploited by crafting a .cbt file, which is essentially a TAR archive containing a filename with a leading '--' command-line option substring. For instance, a filename like '--checkpoint-action=exec=bash' can trigger this vulnerability, granting an attacker control over the affected system.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2017-1000083
Created by Rapid7

evince-cve-2017-1000083
Created by matlink

cve-2017-1000083-atril-nautilus
Created by matlink

References