[ASA-201803-8] calibre: arbitrary command execution
Jelle van der Waa
jelle at archlinux.org
Tue Mar 13 20:34:58 UTC 2018
Arch Linux Security Advisory ASA-201803-8
Date : 2018-03-11
CVE-ID : CVE-2018-7889
Package : calibre
Type : arbitrary command execution
Remote : Yes
Link : https://security.archlinux.org/AVG-650
The package calibre before version 3.19.0-1 is vulnerable to arbitrary
Upgrade to 3.19.0-1.
# pacman -Syu "calibre>=3.19.0-1"
The problem has been fixed upstream in version 3.19.0.
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on
imported bookmark data, which allows remote attackers to execute
arbitrary code via a crafted .pickle file, as demonstrated by Python
code that contains an os.system call.
A remote attacker is able to execute arbitrary commands by tricking the
user into importing a specially crafted bookmark.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 488 bytes
Desc: not available
More information about the arch-security