TUGZip 3.4.0.0, TUGZip 3.3.0.0, and TUGZip 3.1.0.2 do not properly sanitize archives, making it possible to overwrite arbitrary files using a directory transversal attack.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45404/TUGZip.txt
Source: https://packetstormsecurity.com/files/45404/TUGZip.txt.html