CVE-2017-5982

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Feb/27Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/96481
https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
https://www.exploit-db.com/exploits/41312/Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Feb/27Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/96481
https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
https://www.exploit-db.com/exploits/41312/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Feb 28, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-59839.8The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote CVE-2017-59846.5In libavcodec in Libav 9.21, ff_h264_execute_ref_pic_marking() has a heap-based buffer over-read.CVE-2017-59853.3lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose CVE-2017-59865.5Race condition in the sctp_wait_for_sndbuf function in net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users to cause a den CVE-2017-59875.5The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause CVE-2017-59887.5NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecif CVE-2017-59906.1An issue was discovered in PhreeBooksERP before 2017-02-13. The vulnerability exists due to insufficient filtration of user-supplied data in CVE-2017-59917.5An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encou CVE-2017-59928.2Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.CVE-2017-59936.5Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cau CVE-2017-59945.5Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local CVE-2017-59957.5The NetApp ONTAP Select Deploy administration utility 2.0 through 2.2.1 might allow remote attackers to obtain sensitive information via uns