Searching
..

Click anywhere to stop

KLA52366
Multiple vulnerabilities in WinRAR

Обновлено: 20/02/2024
Дата обнаружения
17/08/2023
Уровень угрозы
High
Описание

Multiple vulnerabilities were found in WinRAR. Malicious users can exploit these vulnerabilities to execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. Recovery volume improper validation vulnerability in array index can be exploited to execute arbitrary code.
  2. Remote code execution vulnerability can be exploited remotely to execute arbitrary code.
Эксплуатация

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Пораженные продукты

WinRAR 6.x earlier than 6.23

Решение

Update to the latest version
WinRAR and RAR archiver downloads

Первичный источник обнаружения
WinRAR 6.23 final released
Оказываемое влияние
?
ACE 
[?]
Связанные продукты
WinRAR
CVE-IDS
CVE-2023-388317.8Critical
Узнай статистику распространения уязвимостей в твоем регионе