CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
- Score
- CVSS 3.0 5.5 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2017-03-16
- Last modified
- 2024-08-06
- Weaknesses
- CWE-264
Affected products
References
- http://www.openwall.com/lists/oss-security/2017/01/29/8
- http://www.openwall.com/lists/oss-security/2017/01/31/9
- http://www.securityfocus.com/bid/95909
- https://bugs.launchpad.net/calibre/+bug/1651728
- https://github.com/kovidgoyal/calibre/commit/3a89718664cb8c
