JVN#42768331: Speed Software Root Explorer and Explorer vulnerable to directory traversal

Root Explorer and Explorer provided by Speed Software contain an issue in processing file names, which may result in a directory traversal (CWE-22) vulnerability.

Impact

A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the applications have privileges to access.

Solution

Update the Software
Apply the latest update for each application according to the information provided by the developer.

Products Affected

• Root Explorer versions prior to 3.2
• Explorer versions prior to 2.2