CVE-2005-0331

Published: May 2, 2005Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.

Affected (9)

Products: Rarlab: Winrar

Rarlab

1 product

Winrar

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Rarlab Winrar	Version 3.0.0
Rarlab Winrar	Version 3.10
Rarlab Winrar	Version 3.10_beta3
Rarlab Winrar	Version 3.10_beta5
Rarlab Winrar	Version 3.11
Rarlab Winrar	Version 3.20
Rarlab Winrar	Version 3.40
Rarlab Winrar	Version 3.41
Rarlab Winrar	Version 3.42

References (6)

http://marc.info/?l=bugtraq&m=110737609604210&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/12422

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/20585

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110737609604210&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/12422

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/20585

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.