CVE-2014-9375
Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. (dot dot) in a file path in a ZIP archive.
- Score
- CVSS 2.0 9.0 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2015-02-16
- Last modified
- 2024-08-06
- Weaknesses
- CWE-22
Affected products
References
- http://support.lexmark.com/index?page=content&id=TE677
- http://www.zerodayinitiative.com/advisories/ZDI-15-046/
