EUVD-2014-2027

Malware in sbrugna...

CVE-2014-1975

CVE-2014-1975 affects Unzipper (Android) by R-Company, version 1.0.1 and earlier. It is a directory traversal vulnerability that allows a remote attacker to overwrite or create arbitrary files via a crafted filename, enabling arbitrary file write in the app’s privileges. Affected: Unzipper 1.0.1 ...

CVE-2014-1975

Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...

CVE-2014-1975: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the R-Company Unzipper application 1.0.1 and earlier for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename...

PT-2014-4397

Name of the Vulnerable Software and Affected Versions R-Company Unzipper versions 1.0.1 and earlier Description The issue allows remote attackers to overwrite or create arbitrary files via a crafted filename, potentially leading to unauthorized access or data modification. Recommendations For...

JVN#38227002: Unzipper vulnerable to directory traversal

Unzipper provided by R-Company contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has privileges to...