PT-2019-5201 · Flightcrew+1 · Flightcrew+1

Mike Salvatore · Publicado 2019-06-26 · Atualizado 2023-02-28 · CVE-2019-13241

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FlightCrew versions 0.9.2 and older

Description The issue is related to insufficient input validation in the EPUB validator, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction. This can enable an attacker to record arbitrary files in any directory of the Zip archive.

Recommendations For FlightCrew versions 0.9.2 and older, as a temporary workaround, consider restricting the handling of ZIP archive entries to prevent directory traversal attacks until a patch is available. Avoid using the ZIP extraction feature with untrusted archives until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Path traversal

Enumeração de Fraquezas

CWE-20

CWE-22

Identificadores relacionados

BDU:2020-01892

CVE-2019-13241

MGASA-2019-0396

USN-4055-1

Produtos afetados

Flightcrew

Ubuntu

Referências · 18

• 🔥 https://github.com/Sigil-Ebook/flightcrew/issues/52 · Exploit
• 🔥 https://salvatoresecurity.com/fun-with-fuzzers-how-i-discovered-three-vulnerabilities-part-3-of-3 · Exploit
• https://ubuntu.com/security/CVE-2019-13032 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-4055-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-13241 · Nota de Segurança
• https://usn.ubuntu.com/4055-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-13241 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-13241 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-13241 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-13241 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4055-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-13453 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=25281 · Nota
• https://osv.dev/vulnerability/MGASA-2019-0396 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-13241 · Aviso do Fabricante