CVE 2017-8314

Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.

Related bugs and status

CVE-2017-8314 (Candidate) is related to these bugs:

Bug #1694249: CVE-2017-8314: malicious subtitle zip files vulnerability

Summary				In	Importance	Status
	1694249	CVE-2017-8314: malicious subtitle zip files vulnerability		kodi (Ubuntu)	Undecided	Fix Released
	1694249	CVE-2017-8314: malicious subtitle zip files vulnerability		kodi (Debian)	Unknown	Fix Released

See the

CVE page on Mitre.org for more details.