CVE-2012-0907: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. dot dot in a filename in the neoaxiswebapplicationwin32.zip ZIP archive...