CVE-2013-4668

MEDIUM 5.0CVE-2013-4668 · Published 18/07/2013 · updated 16/06/2026

In short

CVE-2013-4668 is a MEDIUM (CVSS 5.0) vulnerability affecting file roller (file roller project).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.2% of all vulnerabilities.
Fix: update to 3.6.4, 3.8.3, 3.9.3 or later.

Package	Affected versions	Patched versions
file roller file_roller_project	`≥ 3.6.0, < 3.6.4≥ 3.8.0, < 3.8.3≥ 3.9.1, < 3.9.3`	`3.6.43.8.33.9.3`

Description

Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used, allows remote attackers to create arbitrary files via a crafted archive that is not properly handled in a "Keep directory structure" action, related to fr-archive-libarchive.c and fr-window.c.

References

archives.neohapsis.com/archives/bugtraq/2013-07/0039.html · Broken Link
lists.opensuse.org/opensuse-updates/2013-07/msg00095.html · Broken Link
secunia.com/advisories/54351 · Not Applicable
ocert.org/advisories/ocert-2013-001.html · Third Party Advisory
securityfocus.com/bid/61008 · Third Party Advisory
ubuntu.com/usn/USN-1906-1 · Third Party Advisory
git.gnome.org/browse/file-roller/commit · Patch

More vulnerabilities in file roller

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free