File Roller Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

File Roller Project records in CISA KEV

No File Roller Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

File Roller 2 records LOW

Records

2 records

TI-2016-06159 CVE-2016-7162 · GHSA-g3mg-grgw-vqfv

The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2…

LOW 39

The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03328 Published 2016-09-26 Will not fix CWE-20

TI-2013-04091 CVE-2013-4668 · GHSA-g2xw-w8v5-q99p

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3…

LOW 30

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is no…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04307 Published 2013-07-18 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0