KLA11427
Multiple ACE vulnerabilities in WinRAR

Aktualisiert: 03/29/2019

Erkennungsdatum ?	02/05/2019
Schweregrad ?	Kritisch
Beschreibung	Multiple vulnerabilities were found in WinRAR. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: A logical issue can be exploited locally via specially crafted filename of the ACE archive to execute arbitrary code; A validation issue can be exploited locally via specially crafted filename the ACE archive to bypass security restrictions; An out-of-bounds writes vulnerability can be exploited locally via specially crafted ACE or RAR archive to execute arbitrary code; An out-of-bounds writes vulnerability can be exploited locally via specially crafted LZA or LZH archive to execute arbitrary code;
Beeinträchtigte Produkte	WinRAR 5.x earlier than 5.70
Lösung	Update to the latest version WinRAR and RAR archiver downloads
Ursprüngliche Informationshinweise	Extracting a 19 Year Old Code Execution from WinRAR Security Week 09
Folgen ?	ACE [?] SB [?]
CVE-IDS ?	CVE-2018-202507.8Critical CVE-2018-202515.5Critical CVE-2018-202527.8Critical CVE-2018-202537.8Critical
	Link zum Original
	Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken

KLA11427Multiple ACE vulnerabilities in WinRAR