Directory traversal vulnerability in FastJar 0.93 as used in Gnu GCC 4.1.1 and earlier and 3.4.6 and earlier allows user-assisted attackers to overwrite arbitrary files via a .jar file containing filenames with \../\ sequences.