CVE-2016-7843

Published: Apr 28, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.

Affected (3)

Products: Hibara Software: Attachecase For Java, Attachecase Lite, Attachecase Pro

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Hibara Software Attachecase For Java	Up to 0.6.0
Hibara Software Attachecase Lite	Up to 1.4.6
Hibara Software Attachecase Pro	Up to 1.5.7

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (6)

http://jvn.jp/en/jp/JVN28331227/index.html

Source: vultures@jpcert.or.jp

Third Party AdvisoryVDB Entry

http://maruuofactory.life.coocan.jp/attachecase/#pathTraversal

Source: vultures@jpcert.or.jp

Third Party Advisory

http://www.securityfocus.com/bid/95445

Source: vultures@jpcert.or.jp

Third Party AdvisoryVDB Entry

http://jvn.jp/en/jp/JVN28331227/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://maruuofactory.life.coocan.jp/attachecase/#pathTraversal

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/bid/95445

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.