WinRAR Elevation of Privilege Vulnerability

WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. An elevation of privilege vulnerability exists in WinRAR. Due to the executable installer, specifying "requireAdministrator" ...

Design/Logic Flaw

The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...

CVE-2015-5663

The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...

CVE-2015-5663

The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...

CVE-2015-5663

CVE-2015-5663 affects WinRAR prior to 5.30 beta 5. The issue is in file-execution/registry-handling: when a user opens a file without an extension, WinRAR may execute a similarly named file with an extension in the same folder or load a registry setting file, enabling local privilege escalation. ...

CVE-2015-5663: Undefined Security Weakness

The file-execution functionality in WinRAR before 5.30 beta 5 allows local users to gain privileges via a Trojan horse file with a name similar to an extensionless filename that was selected by the user...

PT-2015-7023

Name of the Vulnerable Software and Affected Versions WinRAR versions prior to 5.30 beta 5 Description The issue concerns the file-execution functionality, allowing local users to gain privileges through a Trojan horse file. This can occur when a user selects an extensionless filename and a...

WinRAR Arbitrary Code Execution Vulnerability

WinRAR is a file compression manager developed by software developer Alexander Roshal that supports RAR and ZIP compressed files and can decompress CAB, ARJ and LZH files. An arbitrary code execution vulnerability exists in WinRAR. The vulnerability can be exploited to execute arbitrary code with...

JVN#64636058: WinRAR may insecurely load executable files

WinRAR contains a function where user specified files on the local disk can be executed. When this file does not have a file extension, a file of the same name with a file extension contained in the same folder may be executed by WinRAR instead of the user specified file. WinRAR also contains a...

KLA10729 Privilege escalation vulnerability in WinRAR

Improper files handling was found in WinRAR. By exploiting this vulnerability malicious users can execute arbitrary code with WinRAR privileges. This vulnerability can be exploited remotely via a specially designed archive. Technical details This vulnerability related to two WinRAR functions:one...

Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption

Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=550 The attached file crashes in CmdExtract::UnstoreFile because the signed int64 DestUnpSize is truncated to an unsigned 32bit integer. Perhaps...

Rar - CmdExtract::UnstoreFile Integer Truncation Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=550 The attached file crashes in CmdExtract::UnstoreFile because the signed int64 DestUnpSize is truncated to an unsigned 32bit integer. Perhaps CmdExtract::ExtractCurrentFile should sanity check Arc.FileHead.UnpSize earl...

WinRAR SFX 'Text and Icon'函数远程代码执行漏洞

0 0 0 0...

WinRAR SFX 'Text and Icon' Function Remote Code Execution Vulnerability

WinRAR is a suite of compression and decompression software, of which SFX is a component that carries its own decompression program. A remote code execution vulnerability exists in WinRAR SFX. An attacker could use this vulnerability to execute arbitrary code in an affected application, which cou...

Talking about the zip format, the processing logic vulnerability-vulnerability warning-the black bar safety net

Preface: the zip compression format is widely used, various platforms are used, the Windows platform used to compress the file, the Android platform as apk file format. Since the zip file format is more complex, in the parsing of the zip file format, if handled improperly, could lead to some...

WinRAR SFX Remote Code Execution Vulnerability

WinRAR is a very popular compression/decompression tool. A remote code execution security vulnerability exists in WInRAR SFX v5.21, Text and Icon feature of the Text to display in SFX window module. A remote attacker exploiting this vulnerability with a zip archive with a malicious load can...

WinRAR 0day vulnerability with the use of process-vulnerability warning-the black bar safety net

! British security services, Mohammad Reza Espargham the vulnerability lab found that the popular compression tool WinRAR 5.21 the latest version in the presence of a security vulnerability, the vulnerability is zero-day exploit, and while the official is to patch the vulnerability. At the same...

WinRAR SFX Remote Code Execution

No description provided by source...

WinRAR Settings Import Command Execution

!/usr/bin/python -w Title : WinRar Settings Import Command Execution Date : 02/10/2015 Author : R-73eN Tested on : Windows 7 Ultimate Vulnerable Versions : Winrar 5.30 beta 4 The vulnerability exists in the "Import Settings From File" function. Since Settings file of Winrar are saved as a registr...

WinRar 5.30 beta 4 - Settings Import Command Execution Exploit

Exploit for windows platform in category local exploits !/usr/bin/python -w Title : WinRar Settings Import Command Execution Date : 02/10/2015 Author : R-73eN Tested on : Windows 7 Ultimate Vulnerable Versions : Winrar 5.30 beta 4 The vulnerability exists in the "Import Settings From File"...