← Database

CVE-2005-0331

LOW CVSS: 2.6 Published: 2005-05-02 Modified: 2026-06-16

Description

Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.

Affected Platforms

Rarlab Winrar

Weakness Type

NVD-CWE-Other

References