KDE Ark 1.1.1

CPE Details

KDE Ark 1.1.1
kde
ark
1.1.1
2021-03-29
16h18 +00:00
2021-04-01
12h06 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:kde:ark:1.1.1:*:*:*:*:*:*:*

Informations

Vendor

kde

Product

ark

Version

1.1.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-24654 2020-09-02 14h22 +00:00 In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory.
3.3
Low
CVE-2020-16116 2020-08-03 17h34 +00:00 In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal.
3.3
Low
CVE-2017-5330 2017-03-27 13h00 +00:00 ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.
7.8
High
CVE-2011-2725 2014-02-04 18h00 +00:00 Directory traversal vulnerability in Ark 4.7.x and earlier allows remote attackers to delete and force the display of arbitrary files via .. (dot dot) sequences in a zip file.
6.8