← Database

CVE-2004-0916

MEDIUM CVSS: 5.0 Published: 2005-01-27 Modified: 2026-06-16

Description

Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.

Affected Platforms

Cabextract Project Cabextract

Weakness Type

NVD-CWE-Other

References