Summary
Andreas Cord-Landwehr discovered that KDE-Libs incorrectly handled
extracting certain archives. If a user were tricked into extracting a
specially-crafted archive, a remote attacker could use this issue to
overwrite arbitrary files out of the extraction directory.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | kde4libs | 4:4.13.3-0ubuntu0.3 |
Vulnerabilities 1
-
Unscored —
Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write …
References
-
report
https://ubuntu.com/security/CVE-2016-6232