CVE-2015-1589

Advisory

Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. (dot dot) in a CHM file.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

==============
Bug fixes:

* [CVE-2015-1589] Fixed directory traversal bug

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1589
• http://www.openwall.com/lists/oss-security/2015/02/12/16
• http://www.openwall.com/lists/oss-security/2015/02/12/9
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776164
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100879