1. Home
  2. CVE Database
  3. CVE-2012-0907
MEDIUM · 5.8

CVE-2012-0907

Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. (dot dot) in a filename in the...

Vulnerability Description

Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. (dot dot) in a filename in the neoaxis_web_application_win32.zip ZIP archive.

CVSS Score

5.8

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:P
Confidentiality
NONE
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
NeoaxisNeoaxis Web Player<= 1.4

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2012-0907?

CVE-2012-0907 is a vulnerability with a CVSS score of 5.8 (MEDIUM). Directory traversal vulnerability in the web player in NeoAxis NeoAxis web player 1.4 and earlier allows user-assisted remote attackers to write arbitrary files via a .. (dot dot) in a filename in the...

How severe is CVE-2012-0907?

CVE-2012-0907 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2012-0907?

Check the references section above for vendor advisories and patch information. Affected products include: Neoaxis Neoaxis Web Player.