CoreCVE
Back

HIGH

Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

Published Jan 25, 2024

Description

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The only limitation is that this vulnerability cannot be exploited to overwrite existing files, but that doesn't stop an attacker from achieving Remote Command Execution on the target system. Version 1.26.2 of Atril contains a patch for this vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (4)

CWE-22

Path Traversal

CWE-24

CWE-25

CWE-27

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner GitHub_M
Published Jan 25, 2024
Updated Jun 17, 2025
Reserved Dec 26, 2023
Link CVE-2023-52076
CISA Vulnrichment
Updated Jan 25, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-52076
Red Hat
Severity n/a
Public date n/a
Links CVE-2023-52076
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a