File Roller Project File Roller — known CVE vulnerabilities

Every CVE whose affected-product data names File Roller Project File Roller, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2016-7162 — CVSS 7.5 (high): The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files…
• CVE-2013-4668 — CVSS 5.0 (medium): Directory traversal vulnerability in File Roller 3.6.x before 3.6.4, 3.8.x before 3.8.3, and 3.9.x before 3.9.3, when libarchive is used…