CVE-2004-2643 Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive.
LowCVSS 3.7
EPSS 7.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft cabarc | All versions | No fix listed |
References
- 20041012 Microsoft cabarc directory traversal exploit mailing-list
- 20041012 Microsoft cabarc directory traversal mailing-list
- packetstormsecurity.org exploit
- 12816 exploit third-party-advisory
- 1011626 vdb-entry
- 10714 vdb-entry
- 11376 exploit vdb-entry
- cabarc-dotdot-directory-traversal(17693) vdb-entry