Vulnerability in Rarlab Winrar

CVE-2005-0331

Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.

EPSS: 0.014 (70.6th percentile) — read the EPSS interpretation.

Affected products

Rarlab Winrar — versions 3.0.0, 3.10, 3.10_beta3
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)