Vulnerabilitycritical

WinRAR vulnerable to remote code execution, patch now! (CVE-2023-40477)

Help Net Securityby @helpnetsecurityAug 21, 2023 · 00:00 UTC (Aug 21, 2023)1 min read2

Read at helpnetsecurity.com

Analyze CVE-2023-40477 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-40477 CVE-2018-20250

Tags: cve-2023-40477 cve-2018-20250 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-20250	Absolute Path Traversal in RARLAB WinRAR ACE Extraction (UNACEV2.dll)	7.8	96%	KEVRansomwarePoC ×5	Feb 5, 2019 KEV Feb 15, 2022
CVE-2023-40477	RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability	7.8	11%		May 3, 2024

From the original article

1 min read at helpnetsecurity.com

RARLAB has fixed a high-severity RCE vulnerability (CVE-2023-40477) in the popular file archiver tool WinRAR. A widely used Windows-only utility, WinRAR can create and extract file archives in various compression formats (RAR, ZIP, CAB, ARJ, LZH, TAR, GZip, UUE, ISO, BZIP2, Z and 7-Zip).

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.