CVE-2024-33899

2024-04-2800:00:00

mitre

github.com

rarlab winrar

spoofing

vulnerability

linux

unix

AI Score

6.8

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:rarlab:winrar:6.24:*:*:*:*:*:*:*"
    ],
    "vendor": "rarlab",
    "product": "winrar",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "6.24"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:2.3:a:rarlab:unrar:6.24:*:*:*:*:*:*:*"
    ],
    "vendor": "rarlab",
    "product": "unrar",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "6.24"
      }
    ],
    "defaultStatus": "affected"
  }
]