CVE-2022-30333: Improper Limitation of a Pathname to a Restricted Directory

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract aka unpack operation, as demonstrated by creating a /.ssh/authorizedkeys file. NOTE: WinRAR and Android RAR are unaffected...

RARLAB WinRAR < 5.70 Beta 1 Multiple Vulnerabilities

The version of RARLAB WinRAR installed on the remote Windows host is prior to 5.70 Beta 1. It is, therefore, affected by the following vulnerabilities : - An error exists in the file 'unacev2.dll' related to the 'filename' field, that allows a specially crafted ACE archive to overwrite files...

RARLAB WinRaR ACE Format Input Validation Remote Code Execution (CVE-2018-20250)

A remote code execution vulnerability exist in RARLAB WinRaR. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitary code in the context of the target user...

rarlab-s.cleverbridge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-617443 Description| Value ---|--- Affected Website:| rarlab-s.cleverbridge.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

shop.rarlab.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-494180 Description| Value ---|--- Affected Website:| shop.rarlab.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on ISO...

unrar 5.40 - 'VMSF_DELTA' Filter Arbitrary Memory Write

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1286&desc=6 It appears that the VMSFDELTA memory corruption that was reported to Sophos AV in 2012 and fixed there was actually inherited from upstream unrar. For unknown reasons the information did not reach upstream rar or was...

RARLAB FAR 1.65/1.70 File Manager Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6822/info A buffer overflow vulnerability has been reported for FAR that may result in a denial of service condition. The vulnerability exists due to insufficient bounds checking performed by FAR when parsing directory...

RARLAB WinRAR Zip Format Filename Spoofing

A file name spoofing vulnerability has been reported in RARLAB's WinRAR. The vulnerability is due to a design weakness when processing zip format archives. Successful exploitation could allow for arbitrary code execution in the security context of the logged in user...

RARLAB WinRAR文件扩展伪造漏洞

No description provided by source...

RarLab WinRAR filenames spoof

Visible filename inside ZIP archive can differ from extracted file name...

CVE-2008-7144

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted 1 ACE, 2 ARJ, 3 BZ2, 4 CAB, 5 GZ, 6 LHA, 7 RAR, 8 TAR, or 9 ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats...

CVE-2008-7144

WinRAR prior to 3.71 is affected by multiple unspecified vulnerabilities triggered by crafted archive formats (ACE, ARJ, BZ2, CAB, GZ, LHA, RAR, TAR, ZIP). The exact impact, vectors, and fixes are not detailed in the provided documents.

Rarlab.com SQL Injection

MurderSkillz rarlab.com Home of winrar! = Here is your sql injection =P exposes tableschema - tablename - columnname I am NOT responsible for any stupidity or damage! Learn skiddies! = Fix your shit winrar...

CVE-2005-3262

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename...

CVE-2005-3263

CVE-2005-3263 describes a stack-based buffer overflow in UNACEV2.DLL used by RARLAB WinRAR 2.90–3.50. An attacker can trigger the overflow by supplying an ACE archive containing a file with a long name, allowing remote code execution. The vulnerability affects WinRAR’s ACE archive handling via UN...

CVE-2005-3262

CVE-2005-3262 relates to a format string vulnerability in WinRAR (RARLAB) versions 2.90 through 3.50. The issue arises when WinRAR displays diagnostic errors for an invalid filename, where format string specifiers in a UUE/XXE file are not properly handled, allowing remote attackers to execute ar...

CVE-2005-3262

Format string vulnerability in RARLAB WinRAR 2.90 through 3.50 allows remote attackers to execute arbitrary code via format string specifiers in a UUE/XXE file, which are not properly handled when WinRAR displays diagnostic errors related to an invalid filename...

[Full-disclosure] Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities

====================================================================== Secunia Research 11/10/2005 - WinRAR Format String and Buffer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

WinRAR buffer overflow vulnerability

Hello everybody. We found vulnerability in WinRAR 3.10 or lower version, and reported details to Author of this Software at 2003/01/12. Fixed version 3.11 of WinRAR was released, so we release the Information about this vulnerability. ----------------------------------------------------------...