漏洞关键信息 标题: RAREPROB SOLUTIONS PRIVATE LIMITED HD Video Player All Formats APP(com.rocks.music.videoplayer) V12.1.372 Path Traversal 厂商: RAREPROB SOLUTIONS PRIVATE LIMITED 受影响产品及版本: HD Video Player All Formats (com.rocks.music.videoplayer) V12.1.372 漏洞描述: - HD Video Player All Formats app在文件导入过程中缺乏适当的安全检查。 - 允许未经授权的应用程序控制文件名和内容，利用路径遍历覆盖应用程序内部存储中任意文件。 - 可能导致任意代码执行、敏感信息暴露、服务拒绝等其他安全影响。 来源: - GitHub: https://github.com/Secsys-FDU/AF_CVEs/blob/main/HD%20Video%20Player%20All%20Formats/HD%20Video%20Player%20All%20Formats%20APP%20Arbitrary%20File%20Overwrite%20Vulnerability.md 提交用户: Lu1u (UID 92433) 提交时间: 11/10/2025 04:07 PM 审核时间: 12/02/2025 10:37 AM 状态: Accepted VulDB条目: [234032] [Rarelrob HD Video Player All Formats App 12.1.372 on Android com.rocks.music.videoplayer path traversal] 奖励积分: 20