PT-2007-5717 · Maxim Liadov · Unreal Commander

Publicado 2007-08-27 · Atualizado 2018-10-15 · CVE-2007-4546

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Unreal Commander version 0.92 build 565 Unreal Commander version 0.92 build 573

Description The issue allows remote attackers to potentially trick a user into performing a dangerous file overwrite or creation. This is because the software lists filenames from the Central Directory of a ZIP archive but extracts to local filenames corresponding to names in Local File Header fields in the archive.

Recommendations For Unreal Commander version 0.92 build 565, avoid using the affected ZIP extraction functionality until a fix is available. For Unreal Commander version 0.92 build 573, avoid using the affected ZIP extraction functionality until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-4546

Produtos afetados

Unreal Commander

Referências · 5

• 🔥 http://securityfocus.com/bid/25419 · Exploit
• http://osvdb.org/45831 · Nota
• http://securityfocus.com/archive/1/477432/100/0/threaded · Nota
• http://securityreason.com/securityalert/3060 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4546 · Nota de Segurança