CVE-2023-51698 — AI Deep Analysis Summary

🚨 **Essence**: Atril (MATE Desktop viewer) suffers from **OS Command Injection**. 📄 **Consequences**: Attackers use **malicious CBT documents** to execute arbitrary commands on the target system.…

🛡️ **Root Cause**: **CWE-78** (OS Command Injection). ⚠️ **Flaw**: The application fails to properly sanitize input when processing CBT files, allowing shell commands to be injected and executed.…

👥 **Affected**: Users of **Atril** by **mate-desktop**. 🖥️ **Component**: The MATE Desktop multi-page document viewer. 📦 **Scope**: Specifically impacts the handling of **CBT** (Comic Book Table) format files.

🕵️ **Hackers Can**: Execute **arbitrary OS commands** with the privileges of the user running Atril. 🔓 **Privileges**: Depends on the user context (often standard user, but can be escalated).…

📉 **Threshold**: **Low** for access, **Medium** for impact. 🔑 **Auth**: No authentication required to open the file. 🖱️ **UI**: Requires **User Interaction** (UI:R) – the victim must open the malicious CBT file.…

🚫 **Public Exploit**: **No** public PoC or wild exploitation code found in the provided data. 📂 **References**: Only vendor advisories and commit links are available.…

🔍 **Self-Check**: Scan for **Atril** installations. 📄 **Indicator**: Look for users opening **CBT files** from untrusted sources. 🛠️ **Tooling**: Use static analysis on Atril source code for command injection patterns.…

✅ **Fixed**: **Yes**. 📅 **Published**: Advisory published **2024-01-12**. 🔗 **Patch**: Commit `ce41df6467521ff9fd4f16514ae7d6ebb62eb1ed` addresses the issue.…

🛡️ **Workaround**: **Do not open CBT files** from untrusted sources. 🚫 **Mitigation**: Disable CBT plugin if possible. 🔄 **Update**: Upgrade to the patched version of Atril immediately.…

🔥 **Urgency**: **High**. 🎯 **Priority**: Patch immediately. 📉 **Risk**: CVSS **8.8** (High). 📈 **Severity**: Critical data/command execution risk. ⚡ **Action**: Prioritize updating Atril on all MATE Desktop systems.