CVE-2019-14452

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/Sigil-Ebook/Sigil/commit/04e2f280cc4a0766bedcc7b9eb56449ceecc2ad4Patch, Third Party Advisory
https://github.com/Sigil-Ebook/Sigil/commit/0979ba8d10c96ebca330715bfd4494ea0e019a8fPatch, Third Party Advisory
https://github.com/Sigil-Ebook/Sigil/commit/369eebe936e4a8c83cc54662a3412ce8bef189e4Patch, Third Party Advisory
https://github.com/Sigil-Ebook/Sigil/compare/ea7f27d...5b867e5Third Party Advisory
https://github.com/Sigil-Ebook/Sigil/releases/tag/0.9.16Release Notes, Third Party Advisory
https://github.com/Sigil-Ebook/flightcrew/issues/52#issuecomment-505967936Third Party Advisory
https://github.com/Sigil-Ebook/flightcrew/issues/52#issuecomment-505997355Third Party Advisory
https://salvatoresecurity.com/zip-slip-in-sigil-cve-2019-14452/
https://usn.ubuntu.com/4085-1/Third Party Advisory
https://github.com/Sigil-Ebook/Sigil/commit/04e2f280cc4a0766bedcc7b9eb56449ceecc2ad4Patch, Third Party Advisory
https://github.com/Sigil-Ebook/Sigil/commit/0979ba8d10c96ebca330715bfd4494ea0e019a8fPatch, Third Party Advisory
https://github.com/Sigil-Ebook/Sigil/commit/369eebe936e4a8c83cc54662a3412ce8bef189e4Patch, Third Party Advisory
https://github.com/Sigil-Ebook/Sigil/compare/ea7f27d...5b867e5Third Party Advisory
https://github.com/Sigil-Ebook/Sigil/releases/tag/0.9.16Release Notes, Third Party Advisory
https://github.com/Sigil-Ebook/flightcrew/issues/52#issuecomment-505967936Third Party Advisory
https://github.com/Sigil-Ebook/flightcrew/issues/52#issuecomment-505997355Third Party Advisory
https://salvatoresecurity.com/zip-slip-in-sigil-cve-2019-14452/
https://usn.ubuntu.com/4085-1/Third Party Advisory

Timeline

Published: Jul 31, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-144538.8An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus and logged fields, rel CVE-2019-144549.8SuiteCRM 7.11.x and 7.10.x before 7.11.8 and 7.10.20 is vulnerable to vertical privilege escalation.CVE-2019-144565.4Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging. If a malicious user CVE-2019-144579.8VIVOTEK IP Camera devices with firmware before 0x20x have a stack-based buffer overflow via a crafted HTTP header.CVE-2019-144587.5VIVOTEK IP Camera devices with firmware before 0x20x allow a denial of service via a crafted HTTP header.CVE-2019-144597.5nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused i CVE-2019-14465.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel In CVE-2019-144629.1An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_CO CVE-2019-144639.1An issue was discovered in libmodbus before 3.0.7 and 3.1.x before 3.1.5. There is an out-of-bounds read for the MODBUS_FC_WRITE_MULTIPLE_RE CVE-2019-144645.5XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow.CVE-2019-144657.8fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow.CVE-2019-144666.5The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attack