unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences in a filename.
CVSS Score
2.6
EPSS Score
0.007
Published
2006-03-13