Path Traversal in Lyesoft Andexplorer

CVE-2014-1974

Directory traversal vulnerability in the LYSESOFT AndExplorer application before 20140403 and AndExplorerPro application before 20140405 for Android allows attackers to overwrite or create arbitrary files via unspecified vectors.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.015 (72.0th percentile) — read the EPSS interpretation.

Affected products

Lyesoft Andexplorer — versions 1.0, 1.1, 1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

vultures@jpcert.or.jp (x_refsource_CONFIRM)
vultures@jpcert.or.jp (x_refsource_CONFIRM)
vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)