what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Matlink

Evince CBT File Command Injection

Posted Feb 7, 2019

Authored by Sebastian Krahmer, Brendan Coles, Matlink, Felix Wilhelm | Site metasploit.com

This Metasploit module exploits a command injection vulnerability in Evince before version 3.24.1 when opening comic book `.cbt` files. Some file manager software, such as Nautilus and Atril, may allow automatic exploitation without user interaction due to thumbnailer preview functionality. Note that limited space is available for the payload.

tags | exploit

advisories | CVE-2017-1000083

SHA-256 | be7441cb5d0ca4f4495067990292385a52fbdd586a1d34cad46036dcc7576c4c

Download | Favorite | View

Evince 3.24.0 Command Injection

Posted Nov 13, 2018

Authored by Matlink

Evince version 3.24.0 suffers from a command injection vulnerability.

tags | exploit

advisories | CVE-2017-1000083

SHA-256 | d6ee91ce364604fed7dad5bab2fc980ac42e3d5eca3fbd4d82a3c4e8ed364afc

Download | Favorite | View