Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityhigh

WinRAR flaw enables remote code execution of arbitrary code

Security Affairsby @securityaffairs ()1 min read3
Read at securityaffairs.com
Analyze CVE-2023-40477 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2023-40477
Tags
cve-2023-40477vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-40477
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
7.811%

From the original article

1 min read at securityaffairs.com

A flaw impacting the file archiver utility for Windows WinRAR can allow the execution of commands on a computer by opening an archive. WinRAR is a popular file compression and archival utility for Windows operating systems. The utility is affected by a now-fixed high-severity vulnerability, tracked as CVE-2023-40477 (CVSS score 7.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.