CVE-2012-0907 Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. (dot dot) in a filename in the...
MediumCVSS 5.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. (dot dot) in a filename in the neoaxis_web_application_win32.zip ZIP archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| neoaxis web player | <= 1.4 | No fix listed |
| neoaxis web player | = 1.1 | No fix listed |
| neoaxis web player | = 1.2 | No fix listed |
| neoaxis web player | = 1.3 | No fix listed |
References
- aluigi.altervista.org
- 78311 vdb-entry
- neoaxis-neoaxis-directory-traversal(72427) vdb-entry