CVE-2023-44452highCWE-88

CVE-2023-44452: fallo de gravedad alta en Linux Mint Xreader

Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Xreader

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.8epss 1.3%
Linux Mint Xreader CBT File Parsing Argument Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Linux Mint Xreader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CBT files. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-22132.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Linux Mint · Xreader
CVEs relacionadas — Linux Mint Xreader

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-44451HIGHLinux Mint Xreader EPUB File Parsing Directory Traversal Remote Code Execution VulnerabilityEPSS 1.8%CVE-2026-104982MEDIUMLinux Mint Xreader EPUB File epub-document.c g_strdup_printf path traversalEPSS 0.4%CVE-2026-104983MEDIUMLinux Mint Xreader PDF Attachment Saving ev-window.c g_file_get_child path traversalEPSS 0.4%