CVE-2013-4668: Path Traversal

Q: What is the severity of CVE-2013-4668?

CVE-2013-4668 is rated as a high severity vulnerability due to its potential for remote exploitation.

Q: How do I fix CVE-2013-4668?

To fix CVE-2013-4668, update File Roller to version 3.6.4 or later, 3.8.3 or later, or 3.9.3 or later.

Q: Who is affected by CVE-2013-4668?

CVE-2013-4668 affects users of File Roller versions 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3.

Q: What type of vulnerability is CVE-2013-4668?

CVE-2013-4668 is a directory traversal vulnerability allowing unauthorized file creation.

Q: Can CVE-2013-4668 be exploited remotely?

Yes, CVE-2013-4668 can be exploited remotely by crafting an archive that takes advantage of the vulnerability.

Published Jul 18, 2013

Updated

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.

Affected Software

5 affected components

File Roller Project File Roller Gnome>=3.6.0<3.6.4

File Roller Project File Roller Gnome>=3.8.0<3.8.3

File Roller Project File Roller Gnome>=3.9.1<3.9.3

Canonical Ubuntu Linux=12.10

Canonical Ubuntu Linux=13.04

Remediation

Patch Available

https://git.gnome.org/browse/file-roller/commit/?id=b147281293a8307808475e102a14857055f81631

Event History

Jul 18, 2013

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-4668?

CVE-2013-4668 is rated as a high severity vulnerability due to its potential for remote exploitation.

How do I fix CVE-2013-4668?