CVE-2014-9983

Source
https://cve.org/CVERecord?id=CVE-2014-9983
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2014-9983.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2014-9983
Downstream
Published
2017-06-04T23:29:00Z
Modified
2026-04-10T03:44:59.350447Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive.

References

Affected packages