CVE-2017-8314

Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.

Date published : 2017-05-23

http://www.securityfocus.com/bid/98668

https://github.com/xbmc/xbmc/pull/12024