Skip to content
OpenAdvisories
Unscored CVE-2018-16518 EUVD-2018-8327GHSA-2rjf-47pg-4v46

A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6…

Published Sep 5, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows creation of arbitrary files on a user's workstation using crafted ZED! containers because the watermark loading function can place an executable file into a Startup folder.

References