CVE-2016-7162 The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
HighCVSS 7.5
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/file-roller(Debian:12) | < 3.20.3-1 | 3.20.3-1 |
| debian/file-roller(Debian:13) | < 3.20.3-1 | 3.20.3-1 |
| debian/file-roller(Debian:14) | < 3.20.3-1 | 3.20.3-1 |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| file roller project file roller | = 3.5.4 | No fix listed |
| file roller project file roller | = 3.6.0 | No fix listed |
| file roller project file roller | = 3.6.1 | No fix listed |
| file roller project file roller | = 3.6.1.1 | No fix listed |
| file roller project file roller | = 3.6.2 | No fix listed |
| file roller project file roller | = 3.6.3 | No fix listed |
| file roller project file roller | = 3.6.4 | No fix listed |
| file roller project file roller | = 3.8.0 | No fix listed |
| file roller project file roller | = 3.8.1 | No fix listed |
| file roller project file roller | = 3.8.2 | No fix listed |
| file roller project file roller | = 3.8.3 | No fix listed |
| file roller project file roller | = 3.9.0 | No fix listed |
| file roller project file roller | = 3.9.1 | No fix listed |
| file roller project file roller | = 3.9.2 | No fix listed |
| file roller project file roller | = 3.9.3 | No fix listed |
| file roller project file roller | = 3.10 | No fix listed |
| file roller project file roller | = 3.15 | No fix listed |
| file roller project file roller | = 3.20 | No fix listed |
| file roller project file roller | = 3.20.1 | No fix listed |
| file roller project file roller | = 3.20.2 | No fix listed |
References
- Debian Security Tracker CVE-2016-7162 vendor-advisory
- ftp.gnome.org third-party-advisory
- ftp.gnome.org broken-link
- [oss-security] 20160908 Re: CVE Request: File Roller path traversal mailing-list third-party-advisory
- 92896 third-party-advisory vdb-entry
- USN-3074-1 third-party-advisory vendor-advisory
- bugzilla.gnome.org exploit issue-tracking
- git.gnome.org patch