9 matches found
CVE-2020-25265-25266
CVE-2020-25265 / CVE-2020-25266 CVE-2020-25265 CVE-2020-25266 これは、libappimage と appimaged に対する PoC エクスプロイトです。 2 つの CVE を組み合わせることで、一見 AppImage に見えないファイルを作成できます。 このファイルは appimaged によって暗黙的に検出・インストールされ、同一アプリケーションのシステムインストール版を上書きします。 今回のケースでは、ペイロードとして MP3 ファイルが使用され、上書き対象のアプリケーションは Nautilus です。...
CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
UBUNTU-CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
CVE-2020-25265
AppImage libappimage before 1.0.3 allows attackers to trigger an overwrite of a system-installed .desktop file by providing a .desktop file that contains Name= with path components...
CVE-2020-25265
The CVE-2020-25265 entry concerns AppImage libappimage prior to 1.0.3. It describes a bug where an attacker can cause an overwrite of a system-installed .desktop file by supplying a crafted .desktop file that contains Name= with path components. The impact is described as enabling file overwrite,...
