CVE-2012-5185

Published: Jan 19, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in the Olive Toast Documents Pro File Viewer (formerly Files HD) app before 1.11.1 for iOS allows remote attackers to read or delete files by leveraging guest access.

Affected (1)

Products: Olivetoast: Documents Pro File Viewer

Olivetoast

1 product

Documents Pro File Viewer

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Olivetoast Documents Pro File Viewer	Up to 1.11

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (6)

http://jvn.jp/en/jp/JVN52197991/index.html

Source: vultures@jpcert.or.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000002

Source: vultures@jpcert.or.jp

https://itunes.apple.com/us/app/documents-pro/id374142847

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN52197991/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000002

Source: af854a3a-2127-422b-91ae-364da2661108

https://itunes.apple.com/us/app/documents-pro/id374142847

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.