Approved changes feed: RSS · Atom

cpe:2.3:a:gnome:gcab:0.4:*:*:*:*:*:*:*

part: a version: 0.4 update: *

VendorGnome (0ee6d85f-ce9a-5064-936c-231d12a60ad5)
ProductGcab (7ddd8ccd-279a-5f72-a208-45d2ff9cb113)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gcab purl2cpe 2026-06-01 10:17:25.040824
pkg:deb/ubuntu/gcab purl2cpe 2026-06-01 10:17:25.040827
pkg:github/gnome/gcab purl2cpe 2026-06-01 10:17:25.040830
pkg:rpm/fedora/gcab purl2cpe 2026-06-01 10:17:25.040833
pkg:rpm/opensuse/gcab purl2cpe 2026-06-01 10:17:25.040835

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-0552 vulnerable 2026-06-08 05:06:21.749252 Details available
Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."
Published: 2015-01-15T15:00:00.000Z
Updated: 2024-08-06T04:10:11.076Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.