CVE-2017-5330 ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.
HighCVSS 7.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ark(Debian:12) | < 4:16.08.3-2 | 4:16.08.3-2 |
| debian/ark(Debian:13) | < 4:16.08.3-2 | 4:16.08.3-2 |
| debian/ark(Debian:14) | < 4:16.08.3-2 | 4:16.08.3-2 |
| fedoraproject fedora | = 25 | No fix listed |
| KDE ark | <= 16.12 | No fix listed |
References
- Debian Security Tracker CVE-2017-5330 vendor-advisory
- [oss-security] 20170109 Re: ark vulnerability: need CVE mailing-list patch third-party-advisory
- 95349 third-party-advisory vdb-entry
- bugs.kde.org exploit issue-tracking patch third-party-advisory vdb-entry
- cgit.kde.org patch third-party-advisory
- FEDORA-2017-77ab791c90 vendor-advisory
- GLSA-201701-69 third-party-advisory vdb-entry vendor-advisory
- bugs.debian.org issue-tracking