CVE:CVE-2008-0797
CNNVD:CNNVD-200802-315
iTheora rc1的lib/download.PHP存在目录遍历漏洞。远程攻击者通过url参数中的目录遍历序列来读取任意文件。
solution:Upgrade itheora itheora to a higher version than 1.0:rc1,and avoid the version 1.0:rc1