PT-2014-4396 · Lyard · Andexplorerpro+1

Publicado 2014-04-19 · Atualizado 2014-04-24 · CVE-2014-1974

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions AndExplorer versions prior to 20140403 AndExplorerPro versions prior to 20140405

Description A directory traversal issue exists in the affected applications, allowing attackers to overwrite or create arbitrary files through unspecified vectors.

Recommendations For AndExplorer versions prior to 20140403, update to version 20140403 or later. For AndExplorerPro versions prior to 20140405, update to version 20140405 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2014-1974

Produtos afetados

Andexplorer

Andexplorerpro

Referências · 5

• https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro · Nota
• http://jvn.jp/en/jp/JVN22670349/index.html · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-1974 · Nota de Segurança
• https://play.google.com/store/apps/details?id=lysesoft.andexplorer · Nota