Description
Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.
References
- 12422 vdb-entry
- 20050202 7a69Adv#21 - WinRAR unpack one-folder path disclosure mailing-list
- winrar-dotdotdotdirectory-traversal(20585) vdb-entry