606 matches found
Design/Logic Flaw
The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...
CVE-2016-7162
The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...
CVE-2016-7162
The CVE-2016-7162 vulnerability affects GNOME File Roller, where the _g_file_remove_directory function in file-utils.c can be misused to delete arbitrary files via a symlink attack on a folder inside an archive. Affected versions are File Roller 3.5.4 through 3.20.2. The exploitation context is a...
CVE-2016-7162
The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...
CVE-2016-7162
The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...
CVE-2016-7162: Improper Input Validation
The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...
MGASA-2016-0313 Updated file-roller packages fix security vulnerability
It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...
Updated file-roller packages fix security vulnerability
It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...
openSUSE Security Update : file-roller (openSUSE-2016-1097)
This update for file-roller fixes the following issue : - CVE-2016-7162: Do not follow symlinks when deleting a folder recursively. boo997822, bgo698554 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...
Ubuntu 14.04 LTS / 16.04 LTS : File Roller vulnerability (USN-3074-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3074-1 advisory. It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could...
file-roller: multiple issues
File Roller was affected by a directory traversal bug that could result in deleted files if a user were tricked into opening a malicious archive...
File Roller 'src/file-utils.c' Directory Traversal Vulnerability
File Roller is for the Gnome desktop environment provides a graphical interface to operate the compressed, archived files, similar to the KDE desktop environment, Ark. A target traversal vulnerability exists in File Roller 3.5.4-3.20.2. If the target user opens a malicious document, it can cause...
Ubuntu: Security Advisory (USN-3074-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-3074-1: File Roller vulnerability
It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...
USN-3074-1 file-roller vulnerability
It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...
CVE-2016-7162
A path traversal flaw was found in file-roller. If a user were tricked into opening a specially crafted archive and clicking on a symbolic link, file deletion could occur...
UBUNTU-CVE-2016-7162
The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...
file-roller -- path traversal vulnerability
reports: File Roller 3.5.4 through 3.20.2 was affected by a path traversal bug that could result in deleted files if a user were tricked into opening a malicious archive...
CVE-2016-7162
The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...
PT-2016-7245
Name of the Vulnerable Software and Affected Versions File Roller versions 3.5.4 through 3.20.2 Description The issue allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive. This is related to the g file remove directory function in file-utils.c...