Remote Code Execution Vulnerability in Atril's EPUB ebook parsing
CVE-2023-52076
Key Information:
- Vendor
Mate-desktop
- Status
- Vendor
- CVE Published:
- 25 January 2024
Badges
What is CVE-2023-52076?
Atril Document Viewer, the default document reader for the MATE desktop environment in Linux, is affected by a path traversal and arbitrary file write vulnerability in versions prior to 1.26.2. Attackers can exploit this flaw to write arbitrary files anywhere on the filesystem that the user has access to while opening a specially crafted document. Although existing files cannot be overwritten, this vulnerability significantly increases the risk of remote command execution on the compromised system. The latest version, 1.26.2, includes a patch that mitigates this security issue.
Affected Version(s)
atril < 1.26.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.