ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    WinRAR Self Extracting Archive Flaw

    Scheduled Pinned Locked Moved IT Discussion
    winrarsecurity
    1 Posts 1 Posters 625 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • nadnerBN
      nadnerB
      last edited by scottalanmiller

      Not surprisingly, self extracting zip/rar archives can be dangerous:
      (well, duh)
       
      The popular WinRAR compression software can be abused to produce self-extracting archives that execute smuggled-in JavaScript code when decompressed.
      ...
      It's not quite the end of the world, though: only HTML and JavaScript hidden within the archive is parsed and executed, rather than arbitrary machine code. And being a self-extracting archive, it's basically a .exe file you're asking people to download and trust to run, anyway.
      http://www.theregister.co.uk/2015/09/30/500m_winrar_users_open_to_remote_code_execution_zero_day/

      http://www.itnews.com.au/news/up-to-500-million-exposed-by-winrar-remote-code-execution-vulnerability-409904?eid=1&edate=20151001&utm_source=20151001_AM&utm_medium=newsletter&utm_campaign=daily_newsletter

      1 Reply Last reply Reply Quote 2
      • 1 / 1
      • First post
        Last post