CVE-2017-1000083
HighPublic exploitbackend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a…
Published Sep 5, 2017 · Updated Aug 4, 2026 · Also known as DEBIAN-CVE-2017-1000083, DLA-1031-1, DSA-3911-1, DSA-3916-1, SUSE-SU-2017:1893-1, SUSE-SU-2017:1894-1, SUSE-SU-2017:2390-1, SUSE-SU-2017:3428-1, UBUNTU-CVE-2017-1000083, USN-3351-1
Key Facts
Patch immediately- CVE-2017-1000083 is a high-severity vulnerability (CVSS 7.8 v3.1) affecting Evince (Gnome), Debian Linux, Enterprise Linux Desktop (Redhat) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 51% probability of exploitation in the next 30 days.
- Fixed versions are available, including atril 1.12.2-1ubuntu0.2, atril 1.16.1-2.1, atril 1.16.1-2+deb9u1.
- Brandefense priority: patch immediately, because it is very likely to be exploited soon.
CVSS v3.1
7.8
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS (30-day exploit likelihood)
51%
Higher than 98.9% of all scored CVEs
Exploited in the wild
No known
Not in a known-exploited catalog
Public exploit code
Available
Proof-of-concept or weaponized module
Get the full CVE-2017-1000083 brief as a PDF
Every affected product and fixed release, exploitation status and a first 24 hours response checklist, emailed within minutes.
Description
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the beginning of the filename.
Affected Products
249 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| EvinceGnome | See advisory | 3.24.0 |
| Debian LinuxDebian | 8.0, 9.0 | n/a |
| Enterprise Linux DesktopRedhat | 7.0 | n/a |
| Enterprise Linux ServerRedhat | 7.0, 7.4, 7.5, 7.6 | n/a |
| Enterprise Linux Server AusRedhat | 7.4, 7.6 | n/a |
Patched Releases
atril
1.12.2-1ubuntu0.2, 1.16.1-2.1, 1.16.1-2+deb9u1, 1.8.1+dfsg1-4+deb8u1
Evince
0:3.22.1-5.2.el7_4, 3.10.3-0ubuntu10.3, 3.10.3-2.3.1, 3.14.1-2+deb8u2, 3.18.2-1ubuntu4.1, 3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 3.22.1-3+deb9u1, 3.22.1-4, 3.22.1-5.2.el7_4, 3.24.0-r2, 3.24.0+12+g717df38f-1, 3.4.0-3.1+deb7u1, 40.4-1.3, 3.24.0
evince-browser-plugin
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 3.22.1-5.2.el7_4
evince-devel
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 3.22.1-5.2.el7_4, 40.4-1.3
evince-dvi
3.22.1-5.2.el7_4
evince-lang
3.10.3-2.3.1, 3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
evince-libs
3.22.1-5.2.el7_4
evince-nautilus
3.22.1-5.2.el7_4
evince-plugin-comicsdocument
3.20.1-2.3.1, 3.20.2-6.1, 40.4-1.3
evince-plugin-djvudocument
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
evince-plugin-dvidocument
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
evince-plugin-pdfdocument
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
evince-plugin-psdocument
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
evince-plugin-tiffdocument
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
evince-plugin-xpsdocument
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
libevdocument3-4
3.10.3-2.3.1, 3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
libevview3-3
3.10.3-2.3.1, 3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
nautilus-evince
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
typelib-1_0-EvinceDocument-3_0
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
typelib-1_0-EvinceView-3_0
3.20.1-2.3.1, 3.20.1-6.14.1, 3.20.1-6.16.1, 3.20.2-6.1, 3.20.2-6.19.15, 40.4-1.3
Timeline
Publicly disclosed
Sep 5, 2017
Last updated
Aug 4, 2026
Weakness Type
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
References
- advisoryRHSA-2017:2388
- advisoryhttps://bugzilla.gnome.org/show_bug.cgi?id=784630
- advisoryhttps://bugzilla.suse.com/1046856
- advisoryhttp://seclists.org/oss-sec/2017/q3/128
- advisoryhttps://security-tracker.debian.org/tracker/CVE-2017-1000083
FAQ
Common Questions.
backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-line option substring, as demonstrated by a --checkpoint-action=exec=bash at the be…
Affected: Evince (Gnome); Debian Linux versions 8.0, 9.0; Enterprise Linux Desktop (Redhat) versions 7.0, among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including atril 1.12.2-1ubuntu0.2, atril 1.16.1-2.1, atril 1.16.1-2+deb9u1.
Brandefense priority: patch immediately, because it is very likely to be exploited soon.
Is CVE-2017-1000083 Running On Your Attack Surface?
Brandefense maps vulnerabilities like this one to your internet-facing assets and tells you exactly where to patch.
Request A Demo