Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade gcab | Jul 30, 2024 | Jan 15, 2015 |
| Suse | — | Upgrade libgcab-1_0-0Upgrade gcab-langUpgrade typelib-1_0-GCab-1_0Upgrade gcab-develUpgrade gcab | Dec 18, 2015 | Jan 14, 2015 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub