Vulnerabilities fixed in Rarlab WinRAR

🗓️ 23 Aug 2023 00:00:00Reported by NCSCType

ncsc🔗 advisories.ncsc.nl👁 15 Views

WinRAR 6.23 fixes CVE-2023-40477 and CVE-2023-38831 to prevent buffer overflow and spoofed executables.

Reporter	Title	Published	Views	Family All 249
GithubExploit	Exploit for Insufficient Type Distinction in Rarlab Winrar	27 Dec 202505:26	–	githubexploit
GithubExploit	Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar	1 Apr 202415:59	–	githubexploit
GithubExploit	Exploit for Improper Validation of Array Index in Rarlab Winrar	29 Aug 202316:29	–	githubexploit
GithubExploit	Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar	27 Sep 202418:23	–	githubexploit
GithubExploit	Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar	12 Sep 202314:07	–	githubexploit
GithubExploit	Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar	3 Sep 202314:53	–	githubexploit
GithubExploit	Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar	30 Dec 202403:33	–	githubexploit
GithubExploit	Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar	27 Aug 202314:08	–	githubexploit
GithubExploit	Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar	1 Sep 202316:45	–	githubexploit
GithubExploit	Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar	12 Sep 202316:01	–	githubexploit

23 Aug 2023 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

CVSS 37.8

EPSS0.99815

SSVC

WinRAR recovery volumes file extensions buffer overflow spoofed executables targeted exploitation