Critical vulnerability in WinRAR exposed

[Kevin Lancaster]

Critical vulnerability in WinRAR exposed

A remote code execution vulnerability has been discovered in WinRAR, exposing 500 million users to a possible attack.

 

[])ragon_\/oid]

Um, use 7zip. You can thank me later.

 

[Paul_S]

Um, use 7zip. You can thank me later.

+1
It's been years since I've used WinRAR or worked with RAR archives.

 

[Rickster]

Um, use 7zip. You can thank me later.

Na, WinRAR is epic.

 

[bwbwings]

More like epileptic

 

[dabean]

Um, use 7zip. You can thank me later.

You don't need to have WinRAR installed to be exposed to the vulnerability, it's a self-extracting archive. Executable files have always been risky though.

Better advice would be to avoid running self-extracting archives directly and rather right-click, open with (7zip/WinRAR/whatever) to extract.

 

[Sonic2k]

Misleading article title...

 

[kianm]

Um, use 7zip. You can thank me later.

Until a vulnerability in 7zip is discovered

 

[backstreetboy]

Until a vulnerability in 7zip is discovered

It's open source...

 

[Swa]

Solution: never download an executable unless it's a program.

 

[Devo-sa]

Solution: never download an executable unless it's a program.

Any executable is typically a program by definition, even a self-extracting archive.
So rather just keep using WinRaR but just stay away from SFX archives, and as usual to sensationalist "reporting" this article title is misleading.

 

[reactor_sa]

7zip since like 2005, light weight, fast, better compression than zip and rar. Free. Can't understand why use anything else - ever.

 

[])ragon_\/oid]

You don't need to have WinRAR installed to be exposed to the vulnerability, it's a self-extracting archive. Executable files have always been risky though.

Better advice would be to avoid running self-extracting archives directly and rather right-click, open with (7zip/WinRAR/whatever) to extract.

Never use rar files anyway.

 

[Swa]

Any executable is typically a program by definition, even a self-extracting archive.
So rather just keep using WinRaR but just stay away from SFX archives, and as usual to sensationalist "reporting" this article title is misleading.

Yup, but what I was saying is that executables should only be downloaded if you're downloading a program. If it's simply an archive of media or something then don't download an executable or use the originating program to open it. If it doesn't want to open with it then it's an even bigger red flag.

 

[DA-LION-619]

It's open source...

So?

 

[backstreetboy]

So?

Fix it yourself.

 

[DA-LION-619]

Fix it yourself.

Good point