Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2014-3697
Description:Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme.
Test IDs: None available
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-3697
SuSE Security Announcement: openSUSE-SU-2014:1376 (Google Search)
http://lists.opensuse.org/opensuse-updates/2014-11/msg00023.html
SuSE Security Announcement: openSUSE-SU-2014:1397 (Google Search)
http://lists.opensuse.org/opensuse-updates/2014-11/msg00037.html




© 1998-2025 E-Soft Inc. All rights reserved.