CVE-2020-9359

MEDIUM EPSS 70.1%

Published Mar 24, 20206y ago · Modified Jun 17, 20262w ago

5.3 CVSS 3.1

Medium

Published Mar 24, 2020 6y ago

Last Modified Jun 17, 2026 2w ago

Description

KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.

Base Score

5.3

Exploitability

1.8

Impact

3.4

Vector string

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Attack Vector Local

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Unchanged

Confidentiality Low

Integrity Low

Availability Low

EPSS Exploit Probability

70.1% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Vendor	Product	Version	Range
kde	okular	*	<1.10.0
kde	okular	*	≥19.12.0 – <19.12.3
debian	debian_linux	8.0	any
fedoraproject	fedora	30	any
fedoraproject	fedora	31	any
fedoraproject	fedora	32	any

invent.kde.org https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244

PatchVendor Advisory
kde.org https://kde.org/info/security/advisory-20200312-1.txt

Mailing ListThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2020/03/msg00033.html

Third Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2021/12/msg00019.html

Mailing ListThird Party Advisory
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2TY3O6UWX2XTP7PISPTZ6FYRDFU4UF66/
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AW6GJ3AKGXOMTDHNZBMSXDTWNJJRFBDH/
lists.fedoraproject.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/G3HL3F6JLCSRLPFZ47735F5STPJWDVR4/
security.gentoo.org https://security.gentoo.org/glsa/202007-47

Third Party Advisory

invent.kde.org https://invent.kde.org/kde/okular/-/commit/6a93a033b4f9248b3cd4d04689b8391df754e244

PatchVendor Advisory