CVE-2016-10187

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.

• CWE-264

• http://www.openwall.com/lists/oss-security/2017/01/29/8Mailing List, Patch
• http://www.openwall.com/lists/oss-security/2017/01/31/9Mailing List, Patch
• http://www.securityfocus.com/bid/95909Third Party Advisory
• https://bugs.launchpad.net/calibre/+bug/1651728Exploit, Issue Tracking
• https://github.com/kovidgoyal/calibre/commit/3a89718664cb8cPatch
• http://www.openwall.com/lists/oss-security/2017/01/29/8Mailing List, Patch
• http://www.openwall.com/lists/oss-security/2017/01/31/9Mailing List, Patch
• http://www.securityfocus.com/bid/95909Third Party Advisory
• https://bugs.launchpad.net/calibre/+bug/1651728Exploit, Issue Tracking
• https://github.com/kovidgoyal/calibre/commit/3a89718664cb8cPatch

Published

Mar 16, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10181An issue was discovered on the D-Link DWR-932B router. qmiwe…7.5
• CVE-2016-10182An issue was discovered on the D-Link DWR-932B router. qmiwe…9.8
• CVE-2016-10183An issue was discovered on the D-Link DWR-932B router. qmiwe…7.5
• CVE-2016-10184An issue was discovered on the D-Link DWR-932B router. qmiwe…7.5
• CVE-2016-10185An issue was discovered on the D-Link DWR-932B router. A sec…7.5
• CVE-2016-10186An issue was discovered on the D-Link DWR-932B router. /var/…7.5
• CVE-2016-10188Use-after-free vulnerability in bitlbee-libpurple before 3.5…
• CVE-2016-10189BitlBee before 3.5 allows remote attackers to cause a denial…
• CVE-2016-1019Adobe Flash Player 21.0.0.197 and earlier allows remote atta…9.8
• CVE-2016-10190Heap-based buffer overflow in libavformat/http.c in FFmpeg b…
• CVE-2016-10191Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpe…
• CVE-2016-10192Heap-based buffer overflow in ffserver.c in FFmpeg before 2.…