2 matches found
Code injection
ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications...
6.8CVSS7.9AI score0.03118EPSS
SaveExploits1References6Affected Software2
Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : kdeutils vulnerability (USN-1276-1)
Tim Brown discovered that Ark did not properly perform input validation when previewing archive files. If a user were tricked into opening a crafted archive file, an attacker could remove files via directory traversal. Note that Tenable Network Security has extracted the preceding description blo...
6.8CVSS5.4AI score0.02952EPSS
SaveExploits2References2
20