This update for evince fixes the following issues :

  - CVE-2017-1000083: Remote attackers could have used the     comicbook mode of evince to inject shell code.
    (bsc#1046856, bgo#784630)

This update was imported from the SUSE:SLE-12-SP2:Update update project.

This update for evince fixes the following issues :

Security issue fixed :

  - CVE-2017-1000083: Remove support for tar and tar-like     commands in comics backend (bsc#1046856).

This update was imported from the SUSE:SLE-12-SP2:Update update project.

An update for evince is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files.

Security Fix(es) :

* It was found that evince did not properly sanitize the command line which is run to untar Comic Book Tar (CBT) files, thereby allowing command injection. A specially crafted CBT file, when opened by evince or evince-thumbnailer, could execute arbitrary commands in the context of the evince program. (CVE-2017-1000083)

Red Hat would like to thank Felix Wilhelm (Google Security Team) for reporting this issue.

- CVE-2017-1000083: Evince command injection vulnerability     in CBT handler (#1468488)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Atril, the MATE document viewer, made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code.
This update disables the CBT format entirely.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2116:01 advisory.

    Evince is simple multi-page document viewer. It can display and print     Portable Document Format (PDF), PostScript (PS) and Encapsulated PostScript     (EPS) files. When supported by the document format, evince allows searching     for text, copying text to the clipboard, hypertext navigation,     table-of-contents bookmarks and editing of forms.
     Support for other document formats such as DVI and DJVU can be added by     installing additional backends.
    CVE-2017-1000083     backend/comics/comics-document.c (aka the comic book backend) in     GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary     commands via a .cbt file that is a TAR archive containing a filename beginning     with a -- command-line option substring, as demonstrated by     a --checkpoint-action=exec=bash at the beginning of the filename.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Felix Wilhelm discovered that the Evince document viewer made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code.
This update disables the CBT format entirely.

from the Google Security Team discovered that the Evince document viewer made insecure use of tar when opening tar comic book archives (CBT). Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely.

For Debian 7 'Wheezy', these problems have been fixed in version 3.4.0-3.1+deb7u1.

We recommend that you upgrade your evince packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for evince fixes the following issues :

  - CVE-2017-1000083: Remote attackers could have used the     comicbook mode of evince to inject shell code.
    (bsc#1046856, bgo#784630)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - It was found that evince did not properly sanitize the     command line which is run to untar Comic Book Tar (CBT)     files, thereby allowing command injection. A specially     crafted CBT file, when opened by evince or evince-     thumbnailer, could execute arbitrary commands in the     context of the evince program. (CVE-2017-1000083)

According to the version of the evince packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - It was found that evince did not properly sanitize the     command line which is run to untar Comic Book Tar (CBT)     files, thereby allowing command injection. A specially     crafted CBT file, when opened by evince or     evince-thumbnailer, could execute arbitrary commands in     the context of the evince program. (CVE-2017-1000083)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
101968	openSUSE Security Update : evince (openSUSE-2017-834)	Nessus	SuSE Local Security Checks	7/26/2017	12/9/2025	high
105456	openSUSE Security Update : evince (openSUSE-2017-1417)	Nessus	SuSE Local Security Checks	12/26/2017	11/10/2025	high
102761	CentOS 7 : evince (CESA-2017:2388)	Nessus	CentOS Local Security Checks	8/25/2017	1/4/2021	high
101575	Fedora 26 : evince (2017-0f75ee2f38)	Nessus	Fedora Local Security Checks	7/17/2017	12/10/2025	high
101910	Debian DSA-3916-1 : atril - security update	Nessus	Debian Local Security Checks	7/24/2017	12/9/2025	high
289548	MiracleLinux 7 : evince-3.22.1-5.2.el7 (AXSA:2017-2116:01)	Nessus	Miracle Linux Local Security Checks	1/16/2026	2/9/2026	high
101556	Debian DSA-3911-1 : evince - security update	Nessus	Debian Local Security Checks	7/17/2017	12/11/2025	high
101792	Debian DLA-1031-1 : evince security update	Nessus	Debian Local Security Checks	7/19/2017	12/10/2025	high
101807	SUSE SLED12 Security Update : evince (SUSE-SU-2017:1893-1)	Nessus	SuSE Local Security Checks	7/19/2017	12/9/2025	high
101808	SUSE SLES12 Security Update : evince (SUSE-SU-2017:1894-1)	Nessus	SuSE Local Security Checks	7/19/2017	12/9/2025	high
102660	Scientific Linux Security Update : evince on SL7.x x86_64 (20170802)	Nessus	Scientific Linux Local Security Checks	8/22/2017	11/26/2025	high
103080	EulerOS 2.0 SP2 : evince (EulerOS-SA-2017-1222)	Nessus	Huawei Local Security Checks	9/11/2017	11/24/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high