Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Rechi

#48769of 56,328
5.5Total CVSS
Vulnerabilities · 1
PT-2017-18279
5.5
2017-05-23
Xbmc Foundation · Kodi · CVE-2017-8314
**Name of the Vulnerable Software and Affected Versions** Kodi versions 17.1 and earlier **Description** The issue allows for arbitrary file write on disk via a Zip file used as subtitles, due to a Directory Traversal vulnerability in the Zip Extraction built-in function. **Recommendations** For Kodi versions 17.1 and earlier, update to a version that contains a fix for this issue, as using the built-in Zip Extraction function with subtitles from untrusted sources can lead to arbitrary file writes on disk.