IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.5Yüksek

CVE-2024-36052

rarlab winrar Yayım: (2 yıl önce)

Açıklama

RARLAB WinRAR before 7.00, on Windows, allows attackers to spoof the screen output via ANSI escape sequences, a different issue than CVE-2024-33899.

Zayıflık türü (CWE): CWE-150

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
rarlab winrar < 7.00

Kaynaklar ve yamalar

Aynı üründe son açıklar — WinRAR

6.2Orta
CVE-2019-25677

WinRAR 5.61 Denial of Service via Malformed Language File

Win-Rar WinRAR

WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the t…

6.1Orta
CVE-2025-52331
rarlab winrar

Cross-site scripting (XSS) vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the computer username, generated report directory, and IP address. The generate report command includes …

8.4Yüksek
CVE-2025-8088 KEV Fidye yazılımında kullanılıyor

Path traversal vulnerability in WinRAR

win.rar GmbH WinRAR

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and …

94%EPSS
8.4Yüksek
CVE-2014-125119

WinRAR < 5.00 Filename Spoofing RCE

RARLab WinRAR

A filename spoofing vulnerability exists in WinRAR when opening specially crafted ZIP archives. The issue arises due to inconsistencies between the Central Directory and Local File Header entries in ZIP files. When viewed in WinRAR, the file name from the Cen…

2.0%EPSS