CVE-2018-7889

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a…

published March 8, 2018

CVSS
—
EPSS
5%
Percentile
91.4
In the wild
Unconfirmed
What it is

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04508 · 91.4th percentile
Published
2018-03-08T21:00Z
EPSS history
Timeline
  • 08 MAR 21:00Z
    gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a…
    cvelistv5