CVE-2007-4546

Published: Aug 27, 2007Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Unreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP archive, but extracts to local filenames corresponding to names in Local File Header fields in this archive, which might allow remote attackers to trick a user into performing a dangerous file overwrite or creation.

Affected (2)

Products: X Diesel: Unreal Commander

1 product

Unreal Commander

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
X Diesel Unreal Commander	Version 0.92_build565
X Diesel Unreal Commander	Version 0.92_build573

References (8)

http://osvdb.org/45831

Source: cve@mitre.org

http://securityreason.com/securityalert/3060

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/477432/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25419

Source: cve@mitre.org

Exploit

http://osvdb.org/45831

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/3060

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/477432/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/25419

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.