CVE-2014-9983 | BDVDB-2026-86073 Detail

Description#

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774172

Exploit#

No public exploit known

History#

Version 12017-06-04Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.