CVE-2017-14120

High

Published: 03/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Unrar 0.0.1 (also known as unrar-free or unrar-gpl) has a directory traversal vulnerability in RAR v2 archives, allowing files to be unpacked into the upper directory.

Risk Assessment

An attacker could exploit this vulnerability to access files in parent directories, potentially leading to the exposure of sensitive data.

Recommendation

It is recommended to upgrade to a newer version of unrar that addresses this vulnerability or to implement appropriate security measures to restrict filesystem access.

Other vulnerabilities in unrar 0.0.1

CVE-2017-12938High
UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.

Original NVD description (English source)

unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpacked into the upper directory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS