CVEvulnerability
CVE-2014-1974
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and AndExplorerPro application before 20140405 for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.
Affected configurations
• lyesoft andexplorer 1.0
• lyesoft andexplorer 1.1
• lyesoft andexplorer 1.2
• lyesoft andexplorer 1.3
• lyesoft andexplorer 1.4
• lyesoft andexplorer 1.5
• lyesoft andexplorer 1.6
• lyesoft andexplorer 1.7
• lyesoft andexplorer 1.8
• lyesoft andexplorer 1.9
• lyesoft andexplorer 2.0
• lyesoft andexplorer 2.1
• lyesoft andexplorer 2.2
• lyesoft andexplorer 2.3
• lyesoft andexplorer 2.4
• lyesoft andexplorer 2.5
• lyesoft andexplorer 3.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://jvn.jp/en/jp/JVN22670349/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037 jvndb.jvn.jp
- https://play.google.com/store/apps/details?id=lysesoft.andexplorer play.google.com
- https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro play.google.com
- http://jvn.jp/en/jp/JVN22670349/index.html jvn.jp
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000037 jvndb.jvn.jp
- https://play.google.com/store/apps/details?id=lysesoft.andexplorer play.google.com
- https://play.google.com/store/apps/details?id=lysesoft.andexplorerpro play.google.com