CVE-2019-16707
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para calibre en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 23
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.