PT-2017-16435 · Kde+1 · Ark+1

Publicado 2017-01-16 · Atualizado 2017-04-11 · CVE-2017-5330

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ark versions prior to 16.12.1

Description The issue allows remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.

Recommendations For versions prior to 16.12.1, update to version 16.12.1 or later to resolve the issue.

Exploit

Correção

RCE

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

ALT-PU-2017-1450

CVE-2017-5330

OPENSUSE-SU-2017:0140-1

OPENSUSE-SU-2017:0150-1

Produtos afetados

Alt Linux

Ark

Referências · 20

• 🔥 https://bugs.kde.org/show_bug.cgi?id=374572 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-5330 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2017:0150-1 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2017-5330 · Nota
• https://cgit.kde.org/ark.git/commit/?id=82fdfd24d46966a117fa625b68784735a40f9065 · Correção
• https://suse.com/security/cve/CVE-2017-5330 · Nota
• http://openwall.com/lists/oss-security/2017/01/10/2 · Correção
• https://errata.altlinux.org/ALT-PU-2017-1450 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2017:0140-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-5330 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5330 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-5330 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NIMZUCG6IQR5S65IVQOXQFQV7TMVSYAT · Aviso do Fabricante
• https://security.gentoo.org/glsa/201701-69 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-5330 · Aviso do Fabricante