CVE-2018-0496

Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 (as well as in RTsoft's Dink Smallwood HD / ProtonSDK version) before 3.14 allow an attacker to overwrite arbitrary files on the user's system.

References

Affected packages

Git

cgit.git.savannah.gnu.org/cgit/freedink/dfarc.git

Affected ranges

Type: GIT
Repo: https://cgit.git.savannah.gnu.org/cgit/freedink/dfarc.git
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

40cc957f52e772f45125126439ba9333cf2d2998

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0496.json"

git.savannah.gnu.org/git/freedink/dfarc.git

Affected ranges

Type: GIT
Repo: https://git.savannah.gnu.org/git/freedink/dfarc.git
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

699c828033377e681aa08a8c7664d901efd4ea7e

Affected versions

v3.*

v3.0

v3.10

v3.12

v3.2

v3.2.1

v3.2.2

v3.2.3

v3.2.4

v3.4

v3.6

v3.8

v3.8.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-0496.json"