CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive

published June 4, 2017

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01768 · 77.8th percentile
Published
2017-06-04T14:00Z
EPSS history
Timeline
  • 04 JUN 14:00Z
    Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive
    cvelistv5