7.5
CVE-2016-7162
- EPSS 1.15%
- Veröffentlicht 26.09.2016 15:59:04
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version14.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version16.04 SwEditionlts
File Roller Project ≫ File Roller Version3.5.4 SwPlatformgnome
File Roller Project ≫ File Roller Version3.6.0 SwPlatformgnome
File Roller Project ≫ File Roller Version3.6.1 SwPlatformgnome
File Roller Project ≫ File Roller Version3.6.1.1 SwPlatformgnome
File Roller Project ≫ File Roller Version3.6.2 SwPlatformgnome
File Roller Project ≫ File Roller Version3.6.3 SwPlatformgnome
File Roller Project ≫ File Roller Version3.6.4 SwPlatformgnome
File Roller Project ≫ File Roller Version3.8.0 SwPlatformgnome
File Roller Project ≫ File Roller Version3.8.1 SwPlatformgnome
File Roller Project ≫ File Roller Version3.8.2 SwPlatformgnome
File Roller Project ≫ File Roller Version3.8.3 SwPlatformgnome
File Roller Project ≫ File Roller Version3.9.0 SwPlatformgnome
File Roller Project ≫ File Roller Version3.9.1 SwPlatformgnome
File Roller Project ≫ File Roller Version3.9.2 SwPlatformgnome
File Roller Project ≫ File Roller Version3.9.3 SwPlatformgnome
File Roller Project ≫ File Roller Version3.10 SwPlatformgnome
File Roller Project ≫ File Roller Version3.15 SwPlatformgnome
File Roller Project ≫ File Roller Version3.20 SwPlatformgnome
File Roller Project ≫ File Roller Version3.20.1 SwPlatformgnome
File Roller Project ≫ File Roller Version3.20.2 SwPlatformgnome
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.15% | 0.765 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.