View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-5330 severity moderate: SUSE including 2 source package names (ark-15.12.3-8.1, libkerfuffle15-15.12.3-8.1), 2 product×package rows across 1 product lines (SUSE Package Hub 12 SP1): Fixed 2.
ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications.