Lucene search
+L

3 matches found

Mageia
Mageia
added 2018/08/31 9:11 p.m.49 views

Updated quazip packages fix security vulnerability

Updated quazip packages fix security vulnerability: A vulnerability has been found in the way developers have implemented the archive extraction of files. An arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar,x...

5.5CVSS3.3AI score0.0595EPSS
SaveExploits0References2
OSV
OSV
added 2018/07/25 5:29 p.m.30 views

CVE-2018-1002209

QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS6.7AI score
SaveExploits0References4
CVE
CVE
added 2018/07/25 5:0 p.m.71 views

CVE-2018-1002209

CVE-2018-1002209 (Zip-Slip) affects QuaZIP before 0.7.6, where directory traversal can occur during extraction due to mishandling of a Zip entry. An attacker could write to arbitrary files outside the target directory. The issue is rooted in the archive extraction implementation in QuaZIP (Qt wra...

5.5CVSS5.4AI score0.0595EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder