Directory traversal vulnerability in WinHKI 1.6 and earlier allows user-assisted attackers to overwrite arbitrary files via a (1) RAR (2) TAR (3) ZIP or (4) TAR.GZ archive with a file whose file name contains \..\ sequences.