Lucene search

K
githubexploit4E6F326F-14E3-5513-BB09-4C35E5A0E962
HistoryAug 30, 2023 - 7:55 p.m.

Exploit for Insufficient Type Distinction in Rarlab Winrar

2023-08-3019:55:11
47
winrar
vulnerability
exploit
cve-2023-38831
zip archives
arbitrary code execution
proof of concept
dynamic
try-except blocks
security
internet-sourced
group-ib
b1tg

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.408

Percentile

97.3%

CVE-2023-38831 Winrar Exploit Generator (POC)

This is a basic …

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

0.408

Percentile

97.3%