CVE-2014-0803

Directory traversal vulnerability in the tetra filer application 2.3.1 and earlier for Android 4.0.3, tetra filer free application 2.3.1 and earlier for Android 4.0.3, tetra filer application 1.5.1 and earlier for Android before 4.0.3, and tetra filer free application 1.5.1 and earlier for Android before 4.0.3 allows attackers to overwrite or create arbitrary files via unspecified vectors.

Score

CVSS 2.0 5.8 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2014-01-12

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Tetra Filer (Yuichiro Okuyama)
• Tetra Filer Free (Yuichiro Okuyama)

References

• http://jvn.jp/en/jp/JVN51285738/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000002
• https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.app
• https://play.google.com/store/apps/details?id=jp.main.brits.android.filer.free