Directory traversal

2013-07-1816:51:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.6%

JSON

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a “Keep directory structure” action, related to fr-archive-libarchive.c and fr-window.c.

CPENameOperatorVersion
ubuntu_linuxeq13.04
ubuntu_linuxeq12.10
file_rollerge3.9.1
file_rollerlt3.9.3
file_rollerge3.8.0
file_rollerlt3.8.3
file_rollerge3.6.0
file_rollerlt3.6.4