Directory Traversal Flaw in WinRAR Product by RARLAB

CVE-2005-0331

Summary

A directory traversal vulnerability exists in WinRAR versions 3.42 and earlier, which can be exploited when users extract ZIP files. This flaw arises from insufficient validation of filenames, allowing attackers to manipulate file paths and create arbitrary files on the user's system. This poses significant risks, as malicious ZIP files can be carefully crafted to execute unauthorized file manipulations or installations during the extraction process.

References