CVE-2014-1974

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-1974
Directory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and AndExplorerPro application before 20140405 for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.

6.4 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://jvn.jp/en/jp/JVN22670349/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037
https://play.google.com/store/apps/details?id=lysesoft.andexplorer
https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro
http://jvn.jp/en/jp/JVN22670349/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037
https://play.google.com/store/apps/details?id=lysesoft.andexplorer
https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:lyesoft:andexplorer:1.0:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.0:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.1:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.1:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.2:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.2:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.3:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.3:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.4:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.4:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.5:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.5:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.6:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.6:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.7:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.7:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.8:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.8:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.9:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:1.9:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.0:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.1:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.1:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.2:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.2:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.3:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.3:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.4:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.4:*:*:*:professional:android:*:*
cpe:2.3:a:lyesoft:andexplorer:2.5:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:3.0:*:*:*:*:android:*:*
cpe:2.3:a:lyesoft:andexplorer:3.0:*:*:*:professional:android:*:*
History

21 Nov 2024, 02:05

Type Values Removed Values Added
References () http://jvn.jp/en/jp/JVN22670349/index.html - () http://jvn.jp/en/jp/JVN22670349/index.html -
References () http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037 - () http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037 -
References () https://play.google.com/store/apps/details?id=lysesoft.andexplorer - () https://play.google.com/store/apps/details?id=lysesoft.andexplorer -
References () https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro - () https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro -
Information

Published : 2014-04-19 19:55

Updated : 2024-11-21 02:05

NVD link : CVE-2014-1974

Mitre link : CVE-2014-1974

CVE.ORG link : CVE-2014-1974

JSON object : View

Products Affected

lyesoft

  • andexplorer
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')