CVE-2016-7842

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Directory traversal vulnerability in AttacheCase 2.8.2.8 and earlier and 3.2.0.4 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
HiBARA Software	AttacheCase	ver.2.8.2.8 and earlier; ver.3.2.0.4 and earlier

References

http://jvn.jp/en/jp/JVN83917769/index.htmlThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/95450Third Party Advisory, VDB Entry
https://hibara.org/software/attachecase/Vendor Advisory
http://jvn.jp/en/jp/JVN83917769/index.htmlThird Party Advisory, VDB Entry
http://www.securityfocus.com/bid/95450Third Party Advisory, VDB Entry
https://hibara.org/software/attachecase/Vendor Advisory

Timeline

Published: Apr 28, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-78435.5Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 an CVE-2016-78445.5GigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via specially crafted mail template.CVE-2016-78456.5GigaCC OFFICE ver.2.3 and earlier allows remote attackers to upload arbitrary files as a user profile image, which may be exploited for unau CVE-2016-78516.1Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be ex CVE-2016-78529.8Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Contin CVE-2016-78539.8Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Contin CVE-2016-78549.8Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Contin CVE-2016-78558.8Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote atta CVE-2016-78569.8Adobe DNG Converter versions 9.7 and earlier have an exploitable memory corruption vulnerability. Successful exploitation could lead to arbi CVE-2016-78578.8Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful ex CVE-2016-78588.8Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful ex CVE-2016-78598.8Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability. Successful ex