VYPR
Get started
← All advisories
Medium severity5.5NVD Advisory· Published Jun 4, 2017· Updated May 13, 2026

CVE-2014-9983

CVE-2014-9983

Description

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive.

Affected products

18
  • Rarlab/Rar18 versions
    cpe:2.3:a:rarlab:rar:4.00:*:*:*:*:*:*:*+ 17 more
    • cpe:2.3:a:rarlab:rar:4.00:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:4.01:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:4.11:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:4.20:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.00:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.01:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.10:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.11:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.20:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.21:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.30:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.31:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.40:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.50:*:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.50:beta1:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.50:beta2:*:*:*:*:*:*
    • cpe:2.3:a:rarlab:rar:5.50:beta3:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.