CVE-2008-0797

CVE-2008-0797 affects iTheora 1.0 rc1. Vulnerable component: lib/download.php; the url parameter allows directory traversal, enabling remote attackers to read arbitrary files. Root cause: insufficient input sanitization of the url parameter. Impact: read access to arbitrary filesystem files can b...