CVE-2018-20251

CVE-2018-20251 refers to a path-traversal in WinRAR’s ACE handling via unacev2.dll. Affected: WinRAR up to and including 5.61 (and related advisories noting ACE parsing support). The UNACEV2.dll creates files/folders as written in the ACE filename field even after the validator detects traversal ...

CVE-2018-20252

CVE-2018-20252 affects WinRAR versions up to and including 5.60, where an out-of-bounds write occurs while parsing ACE and RAR archives (via the ACE parser, unacev2.dll). The vulnerability can lead to arbitrary code execution in the context of the current user when a crafted ACE/RAR archive is pr...

WinRAR Multiple Security Vulnerabilities

Description WinRAR is prone to the following security vulnerabilities: 1. Multiple arbitrary code-execution vulnerabilities 2. A security vulnerability Attackers can exploit these issues to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts...

CVE-2018-20250

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format in UNACEV2.dll. When the filename field is manipulated with specific patterns, the destination extraction folder is ignored, thus treating the filename as an...

RARLAB WinRAR ACE Format Input Validation Remote Code Execution

In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format in UNACEV2.dll. When the filename field is manipulated with specific patterns, the destination extraction folder is ignored, thus treating the filename as an...

PT-2019-1468

Name of the Vulnerable Software and Affected Versions WinRAR versions prior to and including 5.61 Description The issue is related to a path traversal vulnerability in the unacev2.dll library of WinRAR, which occurs when the filename field of the ACE format is crafted in a specific way. This allo...

PT-2019-1470

Name of the Vulnerable Software and Affected Versions WinRAR versions prior to and including 5.60 Description The issue is related to an out-of-bounds write vulnerability in the unacev2.dll library of the WinRAR file archiver when extracting files. This can be exploited by a remote attacker using...

PT-2019-1469

Name of the Vulnerable Software and Affected Versions WinRAR versions prior to and including 5.61 Description The issue is related to a path traversal vulnerability in the UNACE module UNACEV2.dll of WinRAR. When extracting ACE archives, the filename field is not properly checked, allowing an...

CVE-2018-20250: Absolute Path Traversal

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format in UNACEV2.dll. When the filename field is manipulated with specific patterns, the destination extraction folder is ignored, thus treating the filename as an...

CVE-2018-20251: Protection Mechanism Failure

In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format. The UNACE module UNACEV2.dll creates files and folders as written in the filename field even when WinRAR validator noticed the traversal attempt and requestd t...

CVE-2018-20252: Out-of-bounds Write

In WinRAR versions prior to and including 5.60, there is an out-of-bounds write vulnerability during parsing of crafted ACE and RAR archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user...

KLA11427 Multiple ACE vulnerabilities in WinRAR

Multiple vulnerabilities were found in WinRAR. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A logical issue can be exploited locally via specially crafted filename of the ACE archive to...

StrongPity APT Changes Tactics to Stay Stealthy

The APT group behind the sophisticated malware known as StrongPity a.k.a. Promethium has changed its tactics, after various research groups analyzed the malware and exposed its methods of deployment. The efforts have allowed the group to return to hidden status, even after being labeled a known...

winrar-s.cleverbridge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-617322 Description| Value ---|--- Affected Website:| winrar-s.cleverbridge.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

winrar-s.cleverbridge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-485332 Description| Value ---|--- Affected Website:| winrar-s.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure bas...

winrar-cgn.cleverbridge.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-485217 Description| Value ---|--- Affected Website:| winrar-cgn.cleverbridge.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

CVE-2017-5330

ark before 16.12.1 might allow remote attackers to execute arbitrary code via an executable in an archive, related to associated applications...

StrongPity APT Covets Secrets of Crypto Users

APT groups covet secrets, and one in particular has chosen to target users intent on protecting theirs. The group is known as StrongPity, and it’s been a characteristic APT outfit using its share of zero days and modular attack tools to infiltrate victims and conduct espionage. This summer,...

WinRAR History

Nessus was able to gather evidence of compressed files that were opened by WinRAR. Note that only compressed files that were opened and not extracted through the explorer shortcut or command line interface were reported. C Tenable Network Security, Inc. include"compat.inc"; if...

WinRAR Remote Code Execution Vulnerability

WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. A remote code execution vulnerability exists in WinRAR. An attacker can exploit this vulnerability to execute arbitrary code...