CVE-2011-4126
Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere.
- Mettez à jour vers 1.5.0+dfsg-1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de calibre · Page n° 2
Vulnérabilité publiée pour calibre au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 26
CVE-2011-4125
A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root.
- Mettez à jour vers 1.5.0+dfsg-1
Publication Mise à jourCVE-2011-4124
Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges.
- Mettez à jour vers 1.5.0+dfsg-1
Publication Mise à jourCVE-2018-7889
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.
- Mettez à jour vers 3.19.0+dfsg-1
Publication Mise à jourCVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
- Mettez à jour vers 2.75.1+dfsg-1
Publication Mise à jourCVE-2010-1028
Integer overflow in the decompression functionality in the Web Open Fonts Format (WOFF) decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before 3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a buffer overflow, as demonstrated by the vd_ff module in VulnDisco 9.0.
- Mettez à jour vers 2.38.0+dfsg-1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.