CVE-2016-7162

High

Published: 26/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The _g_file_remove_directory function in File Roller versions 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.

Risk Assessment

Attackers can exploit this vulnerability to delete critical files on the server, potentially leading to data loss and system disruption.

Recommendation

It is recommended to update File Roller to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in File Roller

CVE-2026-78322Medium
A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer overflow and cause file-roller to terminate, resulting in a denial of service.

Original NVD description (English source)

The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.