Lucene search

K
cve[email protected]CVE-2014-0809
HistoryJan 24, 2014 - 3:08 p.m.

CVE-2014-0809

2014-01-2415:08:00
CWE-22
web.nvd.nist.gov
26
cve-2014-0809
directory traversal
gapless player
simzip
simple zip viewer
android
remote attack
file overwrite

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%

Directory traversal vulnerability in the Gapless Player SimZip (aka Simple Zip Viewer) application before 1.2.1 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename.

Affected configurations

NVD
Node
gapless_playersimzipRange1.2
OR
gapless_playersimzipMatch1.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%

Related for CVE-2014-0809