PT-2013-5119

CVE-2013-4668

·

Published

2013-07-18

·

Updated

2021-04-28

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions File Roller versions 3.6.x through 3.6.3 File Roller versions 3.8.x through 3.8.2 File Roller versions 3.9.x through 3.9.2
Description The issue allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c, when libarchive is used.
Recommendations For versions 3.6.x through 3.6.3, update to version 3.6.4 or later. For versions 3.8.x through 3.8.2, update to version 3.8.3 or later. For versions 3.9.x through 3.9.2, update to version 3.9.3 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2013-4668
MGASA-2013-0232
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com