Описание
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| kodi | fixed | 2:17.1+dfsg1-3 | package | |
| xbmc | removed | package | ||
| xbmc | no-dsa | jessie | package |
Примечания
http://blog.checkpoint.com/2017/05/23/hacked-in-translation/
https://kodi.tv/article/kodi-v172-minor-bug-fix-and-security-release
Fixed by https://github.com/xbmc/xbmc/commit/35cfe35608b15335ef21d798947fceab3f47c8d7
EPSS
Связанные уязвимости
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.
EPSS