CVE-2014-9707

The record

EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a . (dot), which allows remote attackers to conduct directory traversal attacks, cause a denial of service (heap-based buffer overflow and crash), or possibly execute arbitrary code via a crafted URI.

Affected packages

Related vulnerabilities

• CVE-2015-7833 The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through… CWE-17
• CVE-2015-0275 The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows… CWE-17
• CVE-2015-2535 Active Directory in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and… CWE-17
• CVE-2015-2526 Microsoft .NET Framework 4.5, 4.5.1, 4.5.2, and 4.6 allows remote attackers to cause a… CWE-17
• CVE-2014-8155 GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA… CWE-17
• CVE-2015-1805 The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel… CWE-17
• CVE-2015-3183 The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does… CWE-17
• CVE-2015-4620 name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before… CWE-17