CVE-2024-57966

Summary

CVE-2024-57966 is a vulnerability affecting the libarchiveplugin.cpp component in KDE ark prior to version 24.12.0. This issue allows an attacker to extract files from an archive to an absolute path, potentially leading to unintended file modifications or data leakage. An attacker could exploit this by crafting a specially designed archive and persuading the victim to extract its contents, thus gaining control over the target file system. Users are strongly advised to update to the latest version of KDE ark to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.