Ubuntu Security Notice 4461-1 - Dominik Penner discovered that Ark did not properly sanitize zip archive files before performing extraction. An attacker could use this to construct a malicious zip archive that, when opened, would create files outside the extraction directory.
8b77ab0583418946ca538da2bc0b79f0c808cfa6b4dd79f73e3808043c87a43fGentoo Linux Security Advisory 202008-3 - Ark was found to allow arbitrary file overwrite, possibly allowing arbitrary code execution. Versions less than 20.04.3-r1 are affected.
814545d200aaeee28792e83ca555907b882caf607159bca9224821e462cb7c9cDebian Linux Security Advisory 4738-1 - Dominik Penner discovered that the Ark archive manager did not sanitise extraction paths, which could result in maliciously crafted archives writing outside the extraction directory.
48506d9cca6c53f8f0fe2753f97eaba58ced0f271d9c246db0e082ca5ab04f92
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed