CVE-2018-20253: Check Point Software Technologies Ltd. WinRAR, грешка

Описание

Оригинално описание

In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.

Засегнати продукти

• Check Point Software Technologies Ltd. WinRAR: All versions prior and including 5.60

Вид слабост

• CWE-787 Out-of-bounds Write

История

Други уязвимости в Check Point Software Technologies Ltd. WinRAR

• CVE-2018-20251
• CVE-2018-20252
• 7.8CVE-2018-20250

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2018-20253
• https://nvd.nist.gov/vuln/detail/CVE-2018-20253
• https://research.checkpoint.com/extracting-code-execution-from-winrar/
• https://www.win-rar.com/whatsnew.html