CVE-2017-5330

    Dashboard / Vulnerabilities / CVE-2017-5330

    CVE-2017-5330

    Published: 27 Mar 2017Last Modified: 8 Jul 2026

    Summary:

    Details: ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.

    References: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NIMZUCG6IQR5S65IVQOXQFQV7TMVSYAT/, http://www.securityfocus.com/bid/95349, https://security.gentoo.org/glsa/201701-69, http://www.openwall.com/lists/oss-security/2017/01/10/2, https://bugs.kde.org/show_bug.cgi?id=374572, https://cgit.kde.org/ark.git/commit/?id=82fdfd24d46966a117fa625b68784735a40f9065

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -None

    Affected versions

    v16.12.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High