What’s Vulnerable › Vulnerabilities

CVE-2015-1589

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-02-23 · updated 2026-06-17
• Weakness: CWE-22

Description

Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. (dot dot) in a CHM file.

Affected products

• Archmage Project Archmage: 0.2.4

References

• http://www.openwall.com/lists/oss-security/2015/02/12/16
• http://www.openwall.com/lists/oss-security/2015/02/12/9
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776164
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100879
• http://www.openwall.com/lists/oss-security/2015/02/12/16
• http://www.openwall.com/lists/oss-security/2015/02/12/9
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=776164
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100879

Get alerted when CVE-2015-1589 or the next vulnerability affects your stack