CVE-2018-20253

In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@checkpoint.com

Published

2019-02-13

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Winrar (Check Point Software Technologies Ltd.)
• Winrar (Rarlab)

References

• https://research.checkpoint.com/extracting-code-execution-from-winrar/
• https://www.win-rar.com/whatsnew.html