CVE-2019-16707
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour calibre au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 23
Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.