Vulnerabilities > File Roller Project

DATE CVE VULNERABILITY TITLE RISK
2016-09-26 CVE-2016-7162 Improper Input Validation vulnerability in multiple products
The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.
network
low complexity
canonical file-roller-project CWE-20
5.0
2013-07-18 CVE-2013-4668 Path Traversal vulnerability in multiple products
Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.
network
low complexity
file-roller-project canonical CWE-22
5.0