IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
7.5Hoch

CVE-2024-36052

rarlab winrar Veröffentlicht: (vor 2 Jahren)

Beschreibung

RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899.

Schwachstellentyp (CWE): CWE-150

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
rarlab winrar < 7.00

Referenzen und Patches

Neue CVEs im selben Produkt — WinRAR

6.2Mittel
CVE-2019-25677

WinRAR 5.61 Denial of Service via Malformed Language File

Win-Rar WinRAR

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the t…

6.1Mittel
CVE-2025-52331
rarlab winrar

Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes …

8.4Hoch
CVE-2025-8088 KEV In Ransomware genutzt

Path traversal vulnerability in WinRAR

win.rar GmbH WinRAR

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and …

94%EPSS
8.4Hoch
CVE-2014-125119

WinRAR < 5.00 Filename Spoofing RCE

RARLab WinRAR

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Cen…

2.0%EPSS