Critical vulnerability in WinRAR exposed

An independent vulnerability laboratory researcher has discovered a code execution vulnerability in WinRAR software.

The vulnerability allows remote attackers to execute system-specific code to compromise a target system.

The issue is located in the ‘Text and Icon’ function of the ‘Text to display in SFX window’ module.

Remote attackers are able to generate their own compressed archives with malicious payloads to execute system-specific codes.

The security risk of the code execution vulnerability is estimated as critical, with a CVSS (common vulnerability scoring system) count of 9.2.

The video below shows a proof of concept on how the vulnerability can be exploited.

More on security

A new DDoS Reflection Attack: Portmapper

Large DDoS attacks often use SYN and UDP vectors

Massive increase in DDoS attacks