Riskcovery

CVE-2023-52076

Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

State
Published
Severity
8.5 High
Published
Jan 25, 2024
Updated
Jun 17, 2025
Reserved
Dec 26, 2023

Read the record on cve.org

Description

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywhere on the filesystem to which the user opening a crafted document has access. The only limitation is that this vulnerability cannot be exploited to overwrite existing files, but that doesn't stop an attacker from achieving Remote Command Execution on the target system. Version 1.26.2 of Atril contains a patch for this vulnerability.

Scores

CVSSScoreVectorSource
3.18.5 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:LGitHub_M

Weaknesses

  • CWE-24 Path Traversal: '../filedir'
  • CWE-25 Path Traversal: '/../filedir'
  • CWE-27 Path Traversal: 'dir/../../filename'
  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

ProductVersions
atrilmate-desktop
  • < 1.26.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.