KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4024 advisory.

    [4.10.5-9]
    - Document::processAction: If the url points to a binary, dont run it       Resolves: bz#1821451

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2856 advisory.

  - KDE Okular before 1.10.0 allows code execution via an action link in a PDF document. (CVE-2020-9359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has okular packages installed that are affected by a vulnerability:

  - KDE Okular before 1.10.0 allows code execution via an action link in a PDF document. (CVE-2020-9359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has okular packages installed that are affected by a vulnerability:

  - KDE Okular before 1.10.0 allows code execution via an action link in a PDF document. (CVE-2020-9359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4024 advisory.

    Okular is a universal document viewer developed by KDE supporting different kinds of documents, like PDF,     Postscript, DjVu, CHM, XPS, ePub and others.

    Security Fix(es):

    * okular: local binary execution via specially crafted PDF files (CVE-2020-9359)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - okular: local binary execution via specially crafted PDF     files (CVE-2020-9359)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4024 advisory.

  - KDE Okular before 1.10.0 allows code execution via an action link in a PDF document. (CVE-2020-9359)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202007-47 (Okular: Local restricted command execution)

    A logic error was discovered in Okular, which results in trusting action       links within a PDF, possibly allowing execution of a binary.
  Impact :

    A remote attacker could entice a user to open a specially crafted PDF       using Okular, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition.
  Workaround :

    Avoid opening PDFs from an untrusted source.

Security fix for CVE-2020-9359

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Mickael Karatekin from Sysdream Labs discovered that the Okular document viewer allows code execution via an action link in a PDF document.

For Debian 8 'Jessie', this problem has been fixed in version 4:4.14.2-2+deb8u2.

We recommend that you upgrade your okular packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
180986	Oracle Linux 7 : okular (ELSA-2020-4024)	Nessus	Oracle Linux Local Security Checks	medium
156322	Debian DLA-2856-1 : okular - LTS security update	Nessus	Debian Local Security Checks	medium
154538	NewStart CGSL CORE 5.05 / MAIN 5.05 : okular Vulnerability (NS-SA-2021-0173)	Nessus	NewStart CGSL Local Security Checks	medium
147409	NewStart CGSL CORE 5.04 / MAIN 5.04 : okular Vulnerability (NS-SA-2021-0047)	Nessus	NewStart CGSL Local Security Checks	medium
143074	RHEL 7 : okular (RHSA-2020:4024)	Nessus	Red Hat Local Security Checks	medium
141744	Scientific Linux Security Update : okular on SL7.x x86_64 (20201001)	Nessus	Scientific Linux Local Security Checks	medium
141622	CentOS 7 : okular (RHSA-2020:4024)	Nessus	CentOS Local Security Checks	medium
138970	GLSA-202007-47 : Okular: Local restricted command execution	Nessus	Gentoo Local Security Checks	medium
135016	Fedora 30 : okular (2020-e35573f7df)	Nessus	Fedora Local Security Checks	medium
134916	Debian DLA-2159-1 : okular security update	Nessus	Debian Local Security Checks	medium
134841	Fedora 31 : okular (2020-7036f54316)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2020-9359

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium