CVE-2014-3697

Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to…

published October 29, 2014

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via a drive name in a tar archive of a smiley theme.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03838 · 90.0th percentile
Published
2014-10-29T10:00Z
EPSS history
Timeline
  • 29 OCT 10:00Z
    Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to…
    cvelistv5