FlightCrew Project FlightCrew 0.9.0 for Sigil

CPE Details

FlightCrew Project FlightCrew 0.9.0 for Sigil
flightcrew_project
flightcrew
0.9.0
2019-07-11
12h09 +00:00
2019-07-11
12h09 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:flightcrew_project:flightcrew:0.9.0:*:*:*:*:sigil:*:*

Informations

Vendor

flightcrew_project

Product

flightcrew

Version

0.9.0

Target Software

sigil

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2019-13241 2019-07-04 12h31 +00:00 FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.
7.8
Haute
CVE-2019-13032 2019-06-28 20h56 +00:00 An issue was discovered in FlightCrew v0.9.2 and earlier. A NULL pointer dereference occurs in GetRelativePathToNcx() or GetRelativePathsToXhtmlDocuments() when a NULL pointer is passed to xc::XMLUri::isValidURI(). This affects third-party software (not Sigil) that uses FlightCrew as a library.
5.5
Moyen