ID de Prueba:	1.3.6.1.4.1.25623.1.0.871868
Categoría:	Red Hat Local Security Checks
Título:	RedHat Update for evince RHSA-2017:2388-01
Resumen:	The remote host is missing an update for the 'evince'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'evince' package(s) announced via the referenced advisory. Vulnerability Insight: The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files. Security Fix(es): * It was found that evince did not properly sanitize the command line which is run to untar Comic Book Tar (CBT) files, thereby allowing command injection. A specially crafted CBT file, when opened by evince or evince-thumbnailer, could execute arbitrary commands in the context of the evince program. (CVE-2017-1000083) Red Hat would like to thank Felix Wilhelm (Google Security Team) for reporting this issue. Affected Software/OS: evince on Red Hat Enterprise Linux Server (v. 7) Solution: Please Install the Updated Packages. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-1000083 BugTraq ID: 99597 http://www.securityfocus.com/bid/99597 Debian Security Information: DSA-3911 (Google Search) http://www.debian.org/security/2017/dsa-3911 https://www.exploit-db.com/exploits/45824/ https://www.exploit-db.com/exploits/46341/ http://seclists.org/oss-sec/2017/q3/128 https://bugzilla.gnome.org/show_bug.cgi?id=784630 https://github.com/GNOME/evince/commit/717df38fd8509bf883b70d680c9b1b3cf36732ee RedHat Security Advisories: RHSA-2017:2388 https://access.redhat.com/errata/RHSA-2017:2388
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.