CVE-2016-1244: Input Validation
Published Oct 3, 2016
·Updated
The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file.
Affected Software
4 affected componentsFixes available
debian/unadf
0.7.11a-4+deb11u10.7.11a-5+deb12u10.7.11a-7
Unadf Project Unadf=1.0
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Remediation
Patch Available
Event History
Oct 3, 2016
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1244?
CVE-2016-1244 is considered a high severity vulnerability as it allows remote attackers to execute arbitrary code.
2
How do I fix CVE-2016-1244?
To fix CVE-2016-1244, update the unadf package to version 0.7.11a-4+deb11u1 or later.
3
Which software is affected by CVE-2016-1244?
CVE-2016-1244 affects unadf versions prior to 1.0 and specific Debian versions of the software.
4
What is the impact of CVE-2016-1244?
The impact of CVE-2016-1244 is the potential execution of arbitrary code when processing malicious adf files.
5
Can my system be exploited through CVE-2016-1244?
Yes, if vulnerable versions of unadf are in use, your system can be exploited through CVE-2016-1244.