Description
Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename.
References
- JVNDB-2014-000031 third-party-advisory
- http://jvn.jp/en/jp/JVN38227002/995495/index.html
- JVN#38227002 third-party-advisory
- 66250 vdb-entry
- https://play.google.com/store/apps/details?id=org.rhorita777.unzipper