Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Rarlab Winrar | — | Upgrade Rarlab WinRAR to the latest version | Sep 18, 2025 | May 2, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub