Directory traversal

2018-09-0515:29:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.5%

JSON

A directory traversal vulnerability with remote code execution in Prim’X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user’s workstation using crafted ZED! containers because the watermark loading function can place an executable file into a Startup folder.

CPENameOperatorVersion
zed\\!le6.1
zed\\!_freele1.0

CPE	Name	Operator	Version
	zed\\!	le	6.1
	zed\\!_free	le	1.0

References

github.com/ponypot/cve/blob/master/zed_watermarkExtension.pdf