PT-2014-4396 · Lyard · Andexplorerpro+1

Published 2014-04-19 · Updated 2014-04-24 · CVE-2014-1974

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions AndExplorer versions prior to 20140403 AndExplorerPro versions prior to 20140405

Description A directory traversal issue exists in the affected applications, allowing attackers to overwrite or create arbitrary files through unspecified vectors.

Recommendations For AndExplorer versions prior to 20140403, update to version 20140403 or later. For AndExplorerPro versions prior to 20140405, update to version 20140405 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-1974

Affected Products

Andexplorer

Andexplorerpro

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2014-1974 · Security Note
• https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro · Note
• http://jvn.jp/en/jp/JVN22670349/index.html · Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037 · Note
• https://play.google.com/store/apps/details?id=lysesoft.andexplorer · Note