Unscored severity · published May 2, 2005
CVE-2005-0331
Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a
–
CVSS
1.4%
EPSS
No
On KEV
Description
Directory traversal vulnerability in WinRAR 3.42 and earlier, when the user clicks on the ZIP file to extract it, allows remote attackers to create arbitrary files via a ... (triple dot) in the filename of the ZIP file.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Winrar · Rarlab
3.0.0; 3.10; 3.10_beta3; 3.10_beta5; 3.11; 3.20; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0331
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0331
marc.info
http://marc.info/?l=bugtraq&m=110737609604210&w=2
www.securityfocus.com
http://www.securityfocus.com/bid/12422
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/20585
More from Winrar
8.8
CVE-2025-8088
Path traversal vulnerability in WinRAR
7.8
CVE-2025-6218
RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
7.8
CVE-2023-38831
RARLAB WinRAR Code Execution Vulnerability
7.8
CVE-2018-20250
WinRAR Absolute Path Traversal Vulnerability
7.8
CVE-2026-14191
WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader