High severity7.5NVD Advisory· Published Aug 2, 2016· Updated Jun 17, 2026
CVE-2016-6232
CVE-2016-6232
Description
Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*+ 2 more
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
10- www.ubuntu.com/usn/USN-3042-1nvdPatch
- www.kde.org/info/security/advisory-20160724-1.txtnvdExploitMitigationVendor Advisory
- www.openwall.com/lists/oss-security/2016/07/16/3nvdThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-07/msg00023.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2016-09/msg00000.htmlnvd
- www.debian.org/security/2016/dsa-3643nvd
- www.openwall.com/lists/oss-security/2016/07/16/2nvd
- www.securityfocus.com/bid/91806nvd
- quickgit.kde.orgnvd
- usn.ubuntu.com/4100-1/nvd
News mentions
0No linked articles in our index yet.