1. Forum
  2. DOVE-Net
  3. Hardware/Software Help

  • Do you use RAR? Security

    From MATTHEW MUNSON@VERT/IUTOPIA to All on Saturday, March 16, 2019 09:28:00
    Upgrade to 5.70 ASAP

    https://www.ghacks.net/2019/02/21/winrar-has-a-critical-security-bug-here-is-the-fix/

    WinRAR has a critical security bug: here is the fix
    by Martin Brinkmann on February 21, 2019 in Security - 33 comments
    WinRAR is a very popular software to create and extract archives on Windows and other
    supported operating systems. Part of its popularity comes from its support for different
    types of packing formats, another that the software's trial version never expires.

    A bug was discovered recently that affects all versions of WinRAR prior to 5.70. The bug,
    a remote code execution vulnerability, affects all WinRAR versions and thus all 500
    million users that use the application.

    Security researchers discovered a flaw in a library that WinRAR uses to extract files from
    archives packed with the ACE format.

    Attackers can exploit the vulnerability by pushing specially prepared archives to user
    systems. The bug can be abused to extract the files into any folder on the system
    instead of the folder selected by the user or the default folder for extracted files.
    ---
    þ wcQWK 7.0
  • From Nightfox@VERT/DIGDIST to MATTHEW MUNSON on Saturday, March 16, 2019 17:56:47
    Re: Do you use RAR? Security
    By: MATTHEW MUNSON to All on Sat Mar 16 2019 11:28 am

    Security researchers discovered a flaw in a library that WinRAR uses to extract files from archives packed with the ACE format.

    It has been a very long time since I've extracted any ACE archives, but I suppose it's always good to get a security fix.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
  • From MRO@VERT/BBSESINF to MATTHEW MUNSON on Sunday, March 17, 2019 18:56:06
    Re: Do you use RAR? Security
    By: MATTHEW MUNSON to All on Sat Mar 16 2019 11:28 am

    Upgrade to 5.70 ASAP

    https://www.ghacks.net/2019/02/21/winrar-has-a-critical-security-bug-here-is -the-fix/

    WinRAR has a critical security bug: here is the fix
    by Martin Brinkmann on February 21, 2019 in Security - 33 comments
    WinRAR is a very popular software to create and extract archives on Windows and other
    supported operating systems. Part of its popularity comes from its support for different


    i think they said this bug isnt that dangerous.
    ---
    þ Synchronet þ ::: BBSES.info - free BBS services :::