RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.
CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences