PT-2013-5119
CVE-2013-4668
·
Publicado
2013-07-18
·
Atualizado
2021-04-28
Descrição por
CVSS 2.0
5.0
MédiaMétricasAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
File Roller versions 3.6.x through 3.6.3
File Roller versions 3.8.x through 3.8.2
File Roller versions 3.9.x through 3.9.2
Description
The issue allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c, when libarchive is used.
Recommendations
For versions 3.6.x through 3.6.3, update to version 3.6.4 or later.
For versions 3.8.x through 3.8.2, update to version 3.8.3 or later.
For versions 3.9.x through 3.9.2, update to version 3.9.3 or later.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾