CVE Catalog
CVE-2016-1244
HighSummary
The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file.
Risk Assessment
Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to system takeover or data theft.
Recommendation
It is recommended to update unADF to the latest version and implement filtering of directory names to block shell metacharacters.
Other vulnerabilities in unADF
Original NVD description (English source)
The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file.