Tim Brown discovered that Ark did not properly perform input validation
when previewing archive files. If a user were tricked into opening a
crafted archive file, an attacker could remove files via directory
traversal.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 11.10 | noarch | ark | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |
Ubuntu | 11.10 | noarch | filelight | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |
Ubuntu | 11.10 | noarch | kcalc | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |
Ubuntu | 11.10 | noarch | kcharselect | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |
Ubuntu | 11.10 | noarch | kdeutils-dbg | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |
Ubuntu | 11.10 | noarch | kdf | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |
Ubuntu | 11.10 | noarch | kfloppy | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |
Ubuntu | 11.10 | noarch | kgpg | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |
Ubuntu | 11.10 | noarch | kremotecontrol | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |
Ubuntu | 11.10 | noarch | ktimer | < 4:4.7.1-0ubuntu3.1 | UNKNOWN |