cpe:/a:itheora:itheora:1.0:rc1 CVE-2008-0797 2008-02-15T17:00:00.000-05:00 2017-08-07T21:29:43.620-04:00 5.0 NETWORK LOW NONE PARTIAL NONE NONE http://nvd.nist.gov 2008-02-18T07:46:00.000-05:00 BID 27788 SECUNIA 28929 MISC http://en.wikipedia.org/wiki/Talk:Itheora CONFIRM http://menguy.aymeric.free.fr/theora/news.php XF itheora-download-directory-traversal(40506) Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory traversal sequences in the url parameter.