CVE-2016-7162

The CVE-2016-7162 vulnerability affects GNOME File Roller, where the _g_file_remove_directory function in file-utils.c can be misused to delete arbitrary files via a symlink attack on a folder inside an archive. Affected versions are File Roller 3.5.4 through 3.20.2. The exploitation context is a...

CVE-2016-7162

The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...

MGASA-2016-0313 Updated file-roller packages fix security vulnerability

It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...

Updated file-roller packages fix security vulnerability

It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...

openSUSE Security Update : file-roller (openSUSE-2016-1097)

This update for file-roller fixes the following issue : - CVE-2016-7162: Do not follow symlinks when deleting a folder recursively. boo997822, bgo698554 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Securit...

file-roller: multiple issues

File Roller was affected by a directory traversal bug that could result in deleted files if a user were tricked into opening a malicious archive...

Ubuntu: Security Advisory (USN-3074-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : File Roller vulnerability (USN-3074-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3074-1 advisory. It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could...

File Roller 'src/file-utils.c' Directory Traversal Vulnerability

File Roller is for the Gnome desktop environment provides a graphical interface to operate the compressed, archived files, similar to the KDE desktop environment, Ark. A target traversal vulnerability exists in File Roller 3.5.4-3.20.2. If the target user opens a malicious document, it can cause...

USN-3074-1: File Roller vulnerability

It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...

USN-3074-1 file-roller vulnerability

It was discovered that File Roller incorrectly handled symlinks. If a user were tricked into extracting a specially-crafted archive, an attacker could delete files outside of the extraction directory...

CVE-2016-7162

A path traversal flaw was found in file-roller. If a user were tricked into opening a specially crafted archive and clicking on a symbolic link, file deletion could occur...

CVE-2016-7162

The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...

UBUNTU-CVE-2016-7162

The gfileremovedirectory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive...

file-roller -- path traversal vulnerability

reports: File Roller 3.5.4 through 3.20.2 was affected by a path traversal bug that could result in deleted files if a user were tricked into opening a malicious archive...

Roller Coaster Crazy - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Roller Coaster Crazy published at the 'play' market has multiple vulnerabilities...

Roller Ball - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Roller Ball published at the 'play' market has multiple vulnerabilities...

Real Roller Coaster Simulator - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Real Roller Coaster Simulator published at the 'play' market has multiple vulnerabilities...

Roller Coaster Games - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Roller Coaster Games published at the 'play' market has multiple vulnerabilities...

Roller Coaster Games - Dynamic Code Loading, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Roller Coaster Games published at the 'play' market has multiple vulnerabilities...