Approved changes feed: RSS · Atom

cpe:2.3:a:id:id-software:3.7.1:*:*:*:*:*:*:*

part: a version: 3.7.1 update: *

VendorId (b57c33d1-95bc-52d8-a748-aef4650d5b10)
ProductId Software (9b379647-e248-5b2c-a248-0030c108ee82)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5648 vulnerable 2026-06-08 05:04:52.930131 Details available
Absolute path traversal vulnerability in the handleStartDataFile function in DigiDocSAXParser.c in libdigidoc 3.6.0.0, as used in ID-software before 3.7.2 and other products, allows remote attackers to overwrite arbitrary files via a filename beginning with / (slash) or \ (backslash) in a DDOC file.
Published: 2013-08-29T10:00:00.000Z
Updated: 2024-09-17T00:21:59.761Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.