3 matches found
CVE-2021-42540 Emerson WirelessHART Gateway
The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...
DEBIAN-CVE-2015-0552
Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...
PT-2015-4712
Name of the Vulnerable Software and Affected Versions gcab version 0.4 Description A directory traversal issue exists in the gcab folder extract function, allowing remote attackers to write to arbitrary files via a crafted path in a CAB file. This can be achieved by using a specially crafted path...