CVE-2017-1000472 Information

Description

The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header which allows attackers to conduct absolute path traversal attacks during the ZIP decompression and possibly create or overwrite arbitrary files via a crafted ZIP file related to a \file path injection vulnerability.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Reference

https://github.com/pocoproject/poco/issues/1968 https://lists.debian.org/debian-lts-announce/2018/01/msg00013.html https://www.debian.org/security/2018/dsa-4083

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

REQUIRED

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

HIGH

Base Score

NONE

Base Severity

6.5