A vulnerability in unrar allows overwriting files during archive extraction
A vulnerability (CVE-2022-30333) has been discovered in the unrar utility, allowing specially crafted archive extraction to overwrite files outside the current directory, subject to user permissions. The issue has been resolved in RAR 6.12 and unrar 6.1.7 releases. The vulnerability affects versions for Linux, FreeBSD, and macOS, but does not impact builds for Android and Windows. The problem arises from inadequate checks against the ‘/..’ sequence […]
