Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pkzip | Pkware | * | 4.00 (including) |