Download
| Alert*
|
oval:org.secpod.oval:def:67092
ark: archive utility Ark could be made to write files as your login if it opened a specially crafted file. oval:org.secpod.oval:def:66751 Fabian Vogt reported that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives with symlinks writing outside the extraction directory. oval:org.secpod.oval:def:118671 Ark is a program for managing various archive formats. Archives can be viewed, extracted, created and modified from within Ark. The program can handle various formats such as tar, gzip, bzip2, zip, rar and lha . oval:org.secpod.oval:def:705600 ark: archive utility Ark could be made to write files as your login if it opened a specially crafted file. oval:org.secpod.oval:def:605005 Fabian Vogt reported that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives with symlinks writing outside the extraction directory. |
