Information from HiBARA Software
Vulnerability ID:JVN#62121133
Title:Multiple directory traversal vulnerabilities in AttacheCase
Status:Vulnerable
This is a statement from the vendor itself with no modification by JPCERT/CC.
A vulnerability of directory traversal was found in the encryption tool "AttacheCase" which is published on this site. If this decrypts an altered encrypted file by malicious attackers, it will be expanded into an unintended directory file.
We have confirmed the vulnerability in both the old version (ver.2.8.3.0 or earlier) and the current version (ver.3.2.3.0 or earlier), and those who use these earlier "AttacheCase" should promptly upgrade to a fixed version.
