Описание
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 3.8.3-0ubuntu1 |
| lucid | not-affected | 2.30.1.1-0ubuntu2 |
| precise | not-affected | 3.4.1-0ubuntu1 |
| quantal | released | 3.6.1.1-0ubuntu1.2 |
| raring | released | 3.6.3-1ubuntu4.1 |
| upstream | released | 3.8.3-1 |
Показывать по
EPSS
5 Medium
CVSS2
Связанные уязвимости
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3 ...
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.
EPSS
5 Medium
CVSS2