CVE-2014-1974

Directory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and AndExplorerPro application before 20140405 for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.

Score

CVSS 2.0 6.4 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2014-04-19

Last modified

2024-08-06

Weaknesses

CWE-22

Affected products

• Andexplorer (Lyesoft)

References

• http://jvn.jp/en/jp/JVN22670349/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037
• https://play.google.com/store/apps/details?id=lysesoft.andexplorer
• https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro