CVE-2014-3697
29.10.2014, 10:55
Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme.
| Vendor | Product | Version |
|---|---|---|
| pidgin | pidgin | 𝑥 ≤ 2.10.9 |
| pidgin | pidgin | 2.10.0 |
| pidgin | pidgin | 2.10.1 |
| pidgin | pidgin | 2.10.2 |
| pidgin | pidgin | 2.10.3 |
| pidgin | pidgin | 2.10.4 |
| pidgin | pidgin | 2.10.5 |
| pidgin | pidgin | 2.10.6 |
| pidgin | pidgin | 2.10.7 |
| pidgin | pidgin | 2.10.8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References