Ubuntu 14.04 LTS / 16.04 LTS : File Roller vulnerability (USN-3074-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3074-1 advisory. It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could...

USN-3074-1: File Roller vulnerability

It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...

USN-3074-1 file-roller vulnerability

It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...

CVE-2016-7162

A path traversal flaw was found in file-roller. If a user were tricked into opening a specially crafted archive and clicking on a symbolic link, file deletion could occur...

CVE-2016-7162

The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...

UBUNTU-CVE-2016-7162

The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...

file-roller -- path traversal vulnerability

reports: File Roller 3.5.4 through 3.20.2 was affected by a path traversal bug that could result in deleted files if a user were tricked into opening a malicious archive...

Roller Coaster Crazy - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Roller Coaster Crazy published at the 'play' market has multiple vulnerabilities...

Roller Ball - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Roller Ball published at the 'play' market has multiple vulnerabilities...

Real Roller Coaster Simulator - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Real Roller Coaster Simulator published at the 'play' market has multiple vulnerabilities...

Roller Coaster Games - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Roller Coaster Games published at the 'play' market has multiple vulnerabilities...

Roller Coaster Games - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Roller Coaster Games published at the 'play' market has multiple vulnerabilities...

VR Roller Coaster - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application VR Roller Coaster published at the 'play' market has multiple vulnerabilities...

Roller Coaster Extreme HD - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Roller Coaster Extreme HD published at the 'play' market has multiple vulnerabilities...

File Roller v3.4.1 - DoS PoC

Exploit for linux platform in category dos / poc !/usr/bin/perl Title: File Roller - DoS PoC Date: 08/07/2015 Author: Arsyntex Homepage: https://wiki.gnome.org/Apps/FileRoller Version: v3.4.1 Tested on: Linux lab 3.2.0-85-generic-pae 122-Ubuntu i686 i386 GNU/Linux...

File Roller 3.4.1 Denial Of Service

!/usr/bin/perl Title: File Roller - DoS PoC Date: 08/07/2015 Author: Arsyntex Homepage: https://wiki.gnome.org/Apps/FileRoller Version: v3.4.1 Tested on: Linux lab 3.2.0-85-generic-pae 122-Ubuntu i686 i386 GNU/Linux ------------------------------------------------------------------------- Create ...

File Roller v3.4.1 - Denial of Service (PoC)

File Roller v3.4.1 - Denial of Service PoC !/usr/bin/perl Title: File Roller - DoS PoC Date: 08/07/2015 Author: Arsyntex Homepage: https://wiki.gnome.org/Apps/FileRoller Version: v3.4.1 Tested on: Linux lab 3.2.0-85-generic-pae 122-Ubuntu i686 i386 GNU/Linux...

File Roller v3.4.1 - Denial of Service (PoC)

!/usr/bin/perl Title: File Roller - DoS PoC Date: 08/07/2015 Author: Arsyntex Homepage: https://wiki.gnome.org/Apps/FileRoller Version: v3.4.1 Tested on: Linux lab 3.2.0-85-generic-pae 122-Ubuntu i686 i386 GNU/Linux ------------------------------------------------------------------------- Create ...

CVE-2014-7802

The Top Roller Coasters Europe 2 aka com.appaapps.top10tallesteuropeanrollercoasters2 application @7F050001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7802

The CVE-2014-7802 entry concerns the Top Roller Coasters Europe 2 Android app (com.appaapps.top10tallesteuropeanrollercoasters2). The vulnerability is due to the app not validating X.509 certificates from SSL servers, which allows MITM attackers to spoof servers and obtain sensitive information v...