CVE-2005-0331: RARLAB WinRAR

Low severity, CVSS 2.6. EPSS: 1.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.

Affected products

• RARLAB WinRAR: version 3.0.0 only; version 3.10 only; version 3.10_beta3 only; version 3.10_beta5 only; version 3.11 only; version 3.20 only; …

Published 2005-05-02. Last modified 2026-06-16.