Lucene search
MitreCVELIST:CVE-2017-1000472HistoryJan 03, 2018 - 8:00 p.m.
CVE-2017-1000472
2018-01-0320:00:00
mitre
www.cve.org
4
The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal attacks during the ZIP decompression, and possibly create or overwrite arbitrary files, via a crafted ZIP file, related to a “file path injection vulnerability”.
Related
debian
debian
[SECURITY] [DSA 4083-1] poco security update
2018-01-11 08:51:53
[SECURITY] [DSA 4083-1] poco security update
2018-01-11 08:51:53
[SECURITY] [DLA 1239-1] poco security update
2018-01-10 16:25:03
prion
prion
Path traversal
2018-01-03 20:29:00
cve
cve
CVE-2017-1000472
2018-01-03 20:29:00
osv
osv
poco - security update
2018-01-11 00:00:00
CVE-2017-1000472
2018-01-03 20:29:00
poco - security update
2018-01-10 00:00:00
openvas
openvas
Fedora Update for poco FEDORA-2018-ef9e28d9e4
2018-01-27 00:00:00
Debian: Security Advisory (DSA-4083-1)
2018-01-10 00:00:00
Fedora Update for poco FEDORA-2018-7349a7723e
2018-01-31 00:00:00
debiancve
debiancve
CVE-2017-1000472
2018-01-03 20:29:00
nvd
nvd
CVE-2017-1000472
2018-01-03 20:29:00
nessus
nessus
Debian DSA-4083-1 : poco - security update
2018-01-12 00:00:00
Fedora 26 : poco (2018-7349a7723e)
2018-01-31 00:00:00
Debian DLA-1239-1 : poco security update
2018-01-11 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: poco-1.7.8p3-3.fc26
2018-01-30 17:33:47
[SECURITY] Fedora 27 Update: poco-1.7.8p3-3.fc27
2018-01-26 18:10:38
ubuntucve
ubuntucve
CVE-2017-1000472
2018-01-03 00:00:00