CVE:CVE-2020-9359
CNNVD:CNNVD-202003-1367
KDE Okular是KDE社区的一款开源的通用文档查看器。
KDE Okular 1.10.0之前版本中存在输入验证错误漏洞。攻击者可借助特制的PDF文件利用该漏洞在系统上执行任意代码。
solution:Upgrade kde okular to a higher version than 1.10.0,19.12.3,and avoid the version (,1.10.0),[19.12.0,19.12.3); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 30,31,32,and avoid the version 30,31,32