CVE-2014-125119

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Central Directory is displayed to the user, while the file from the Local File Header is extracted and executed. An attacker can leverage this flaw to spoof filenames and trick users into executing malicious payloads under the guise of harmless files, potentially leading to remote code execution.

• CWE-20
• CWE-434

• https://an7isec.blogspot.com/2014/03/winrar-file-extension-spoofing-0day.html
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/winrar_name_spoofing.rb
• https://web.archive.org/web/20140625054244/http://intelcrawler.com/news-15
• https://web.archive.org/web/20141111142204/https://www.intelcrawler.com/report_2603.pdf
• https://www.rarlab.com/vuln_zip_spoofing_4.20.html
• https://www.vulncheck.com/advisories/winrar-filename-spoofing-rce

Published

Jul 25, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-125113An unrestricted file upload vulnerability exists in Dell (ac…9.3
• CVE-2014-125114A stack-based buffer overflow vulnerability exists in i-Ftp …8.4
• CVE-2014-125115An unauthenticated SQL injection vulnerability exists in Pan…10
• CVE-2014-125116A remote code execution vulnerability exists in HybridAuth v…9.3
• CVE-2014-125117A stack-based buffer overflow vulnerability in the my_cgi.cg…9.8
• CVE-2014-125118A command injection vulnerability exists in the eScan Web Ma…9.4
• CVE-2014-125120Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2014-125121Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2…10
• CVE-2014-125122A stack-based buffer overflow vulnerability exists in the tm…5.3
• CVE-2014-125123An unauthenticated SQL injection vulnerability exists in the…10
• CVE-2014-125124An unauthenticated remote command execution vulnerability ex…10
• CVE-2014-125125A path traversal vulnerability exists in A10 Networks AX Loa…8.8