CVE-2015-1589

Description

Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. (dot dot) in a CHM file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776164 ↗
• http://www.openwall.com/lists/oss-security/2015/02/12/9 ↗
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100879 ↗
• http://www.openwall.com/lists/oss-security/2015/02/12/16 ↗