← Back

CVE-2016-7162

nvd nist
Published: Sep 26, 2016Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.

Affected (22)

Canonical
1 product
Ubuntu Linux
File Roller Project
1 product
File Roller
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 16.04
Configuration B
20 vulnerable
Vulnerable SoftwareAffected Versions
File Roller
Version 3.10
File Roller
Version 3.15
File Roller
Version 3.20.1
File Roller
Version 3.20.2
File Roller
Version 3.20
File Roller
Version 3.5.4
File Roller
Version 3.6.0
File Roller
Version 3.6.1.1
File Roller
Version 3.6.1
File Roller
Version 3.6.2
File Roller
Version 3.6.3
File Roller
Version 3.6.4
File Roller
Version 3.8.0
File Roller
Version 3.8.1
File Roller
Version 3.8.2
File Roller
Version 3.8.3
File Roller
Version 3.9.0
File Roller
Version 3.9.1
File Roller
Version 3.9.2
File Roller
Version 3.9.3

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
ExploitIssue Tracking
Source: cve@mitre.org
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.