Millions of people use this program. WinRar with a very serious vulnerability. Be sure to update the application

WinRar is one of the most popular applications for archiving data and compressing files. The first release of the program took place in 1993, i.e. in the era of Windows 3.11. For over 30 years, the application has been offered under a shareware license. Users receive a 40-day free trial period, after which a message about the need to purchase a license is displayed.

The problem is that this message does not cause the program to stop working. For this reason, many users (probably most) actually use WinRar “semi-legally”.

WinRar with a serious security flaw

Regardless of whether you have paid the license fee for WinRar (which is of course encouraged) or not, you should update the application to its latest version as soon as possible. informed about a dangerous vulnerability that potentially allows remote access to a computer. Potentially, because it requires action on the part of the user – entering a crafted website or opening an infected archive.

An attacker can exploit this vulnerability to inject self-prepared code as part of a currently running process

–

Vulnerability marked with a code name CVE-2023-40477, was discovered by one of the cybersecurity experts on June 8, 2023, and the creators of WinRar, RARLAB, they patched it in the latest version of the program – 6.23, which was released on August 2.

The write out of range security issue has been resolved in the RAR4 recovery volume processing code. We are grateful to GoodSelene working with the Trend Micro Zero Day Initiative for informing us about this error

– we read in the RARLAB announcement.

WinRar photo WinRar

So if you use WinRar, be sure to check if you are using the latest version. To do this, run the application, click on “Help” on the bookmarks bar, and then select “About”.