Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in the script used to read Microsoft Office documents.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| D2gfx | Deerfield | 1.0.2 (including) | 1.0.2 (including) |
| Badblue | Working_resources_inc. | enterprise_1.5 (including) | enterprise_1.5 (including) |
| Badblue | Working_resources_inc. | personal_1.5.6_beta (including) | personal_1.5.6_beta (including) |