Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor File Roller Project Subscribe
Filtered by product File Roller
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-4668 2 Canonical, File Roller Project 2 Ubuntu Linux, File Roller 2021-04-28 5.0 MEDIUM N/A
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.
CVE-2016-7162 2 Canonical, File Roller Project 2 Ubuntu Linux, File Roller 2021-04-14 5.0 MEDIUM 7.5 HIGH
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.