| Package | Affected versions | Patched versions |
|---|---|---|
| winrar | = 3.0.0= 3.10= 3.10_beta3= 3.10_beta5= 3.11= 3.20= 3.40= 3.41= 3.42 |
Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free