6.8Mittel

CVE-2025-31334

RARLAB WinRAR Veröffentlicht: 2025-04-03 08:27 (vor 1 Jahr)

Beschreibung

Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.

Schwachstellentyp (CWE): CWE-356

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
RARLAB	WinRAR	prior to 7.11

Referenzen und Patches

https://www.win-rar.com/start.html?&L=0 Release Notes
https://jvn.jp/en/jp/JVN59547048/ Third Party Advisory

CPE-Treffer (NVD) (1)

cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:* < 7.11

CVSS-Score

6.8Mittel

Quelle: jpcert · CVSS 3.0

Angriffsvektor: Netzwerk
Komplexität: Niedrig
Rechte erforderlich: Hoch
Benutzerinteraktion: Erforderlich
Geltungsbereich: Unverändert
Vertraulichkeit: Hoch
Integrität: Hoch
Verfügbarkeit: Hoch

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Alle Scores (2)

cna	CVSS 3.0	6.8Mittel
vultures@jpcert.or.jp	CVSS 3.0	6.8Mittel

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

1.29%

höher als 70 % aller CVEs

CISA-Bewertung (SSVC)

Ausnutzung: none
Automatisierbar: no
Technische Auswirkung: total

Zeitverlauf

ID reserviert2025-03-27
Veröffentlicht2025-04-03 08:27
Bei IP-DB eingegangen2026-10-25 00:02
Zuletzt aktualisiert2026-06-17 12:10

Vergeben von (CNA): jpcert
NVD-Status: Analyzed

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — WinRAR

7.8Hoch

CVE-2026-14191 vor 4 Monaten

WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader

RARLAB WinRAR; RARLAB RAR; RARLAB UnRAR; RARLAB UnRAR.dll

An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvol5.cpp). The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an indepe…

6.2Mittel

CVE-2019-25677 vor 7 Monaten

WinRAR 5.61 Denial of Service via Malformed Language File

Win-Rar WinRAR

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the t…

6.1Mittel

CVE-2025-52331 vor 12 Monaten

rarlab winrar

Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes …

8.4Hoch

CVE-2025-8088 KEV In Ransomware genutzt vor 1 Jahr

Path traversal vulnerability in WinRAR

win.rar GmbH WinRAR

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and …

94%EPSS

8.4Hoch

CVE-2014-125119 vor 1 Jahr

WinRAR < 5.00 Filename Spoofing RCE

RARLab WinRAR

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Cen…

2.0%EPSS

7.8Hoch

CVE-2025-6218 KEV vor 1 Jahr

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability

RARLAB WinRAR

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the targ…

90%EPSS