Slashdot Mirror
500 Million Users At Risk of Compromise Via Unpatched WinRAR Bug
An anonymous reader writes: A critical vulnerability has been found in the latest version of WinRAR, the popular file archiver and compressor utility for Windows, and can be exploited by remote attackers to compromise a machine on which the software is installed. "The issue is located in the 'Text and Icon' function of the 'Text to display in SFX window' module," Vulnerability Lab explained in a post on on the Full Disclosure mailing list. "Remote attackers are able to generate own compressed archives with malicious payloads to execute system specific codes for compromise."
So a self-extracting RAR can be rigged to exploit your machine. A self-extracting RAR is an executable. So a executable from an untrusted source can exploit your box. Wake me when you have a real vulnerability.
Oh, and samzenpus, that was the most clickbait bullshit Slashdot headline in months. You should be horsewhipped.
On the contrary; WinRAR sucks because it isn't open source. Instead, it's proprietary, spammy nag-ware.
7Zip, the actual open source competitor to WinRAR, is much better.
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
No way, opening links and viewing youtube videos is how you get exploited in the first place ... and it's sinful and could lead to dancing.
Lost at C:>. Found at C.