CVE 2017-1000159

Command injection in evince via filename when printing to PDF. This affects versions earlier than 3.25.91.

Related bugs and status

CVE-2017-1000159 (Candidate) is related to these bugs:

Bug #1759069: [CVE] Arbitrary command injection via DVI filename injection when printing to PDF

		In	Importance	Status
1759069	[CVE] Arbitrary command injection via DVI filename injection when printing to PDF	atril (Ubuntu)	Medium	Fix Released
1759069	[CVE] Arbitrary command injection via DVI filename injection when printing to PDF	atril (Ubuntu Artful)	Medium	Fix Released
1759069	[CVE] Arbitrary command injection via DVI filename injection when printing to PDF	atril (Ubuntu Xenial)	Medium	Fix Released

See the

CVE page on Mitre.org for more details.