4 results · Feed
-
Medium 5.0
libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.
-
Unscored —
In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as d…
-
Unscored —
In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory v…
-
Unscored —
ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to a…