WinRAR users beware

cherub

Senior Member

Dec 18, 2006

973

577

• Sep 30, 2015

• #1

A nasty remote code execution vulnerability for WinRAR has come to light on Full Disclosure. I'd refrain from opening torrented RAR files for the time being!

http://seclists.org/fulldisclosure/2015/Sep/106
http://www.theregister.co.uk/2015/09/30/500m_winrar_users_open_to_remote_code_execution_zero_day/

 

SoccerLover

Elite Member

Jun 12, 2014

5,007

2,773

• Sep 30, 2015

• #2

Damn! Now I need to find some alternative.

 

pxoxrxn

Supreme Member

Dec 21, 2011

1,398

2,084

• Sep 30, 2015

• #3

Who even downloads .rar torrents? Just look at the file type before you download it.

 

The Scarlet Pimp

Supreme Member

Apr 2, 2008

1,416

4,459

• Sep 30, 2015

• #4

sagarmankar said:

Damn! Now I need to find some alternative.

Click to expand...

http://www.linuxmint.com/download.php

 

Conor

Elite Member

Nov 7, 2012

3,621

6,217

• Sep 30, 2015

• #5

I knew there'd be a catch to the whole "neverending trial" thing...

 

B

Banned member 185991

Guest

• Sep 30, 2015

• #6

Does this still apply if you buy a winrar license?

 

M

MaxBox451

Newbie

Sep 16, 2015

0

1

• Sep 30, 2015

• #7

Do people still use winrar? Use 7zip or PeaZip.

 

LeanLow

Senior Member

Jun 15, 2013

1,010

393

• Sep 30, 2015

• #8

MaxBox451 said:

Do people still use winrar? Use 7zip or PeaZip.

Click to expand...

Why not ? Why fix something that isn't broken ? Now I guess it is broken...

 

Last edited: Sep 30, 2015

M

MaxBox451

Newbie

Sep 16, 2015

0

1

• Sep 30, 2015

• #9

LeanLow said:

Why not ? Why fix something that is broken ? Now I guess it is broken...

Click to expand...

Ha, fair enough. I switched because the popup asking me to buy something that was already free annoyed me.

 

davids355

Super Moderator

Moderator

Executive VIP

Jr. VIP

Apr 25, 2011

19,849

28,315

• Sep 30, 2015

• #10

personally I use 7zip.......

 

DanTe_0101

Supreme Member

Mar 2, 2012

1,329

1,028

• Sep 30, 2015

• #11

What if I haven't updated it to the latest update of winrar?
I think I have last year's version...

 

jazzc

Elite Member

Jan 27, 2009

2,964

14,717

• Sep 30, 2015

• #12

I stopped using WinRar years ago when I read that it packs a tiny programmable & undocumented VM. I guess being paranoid has its benefits.

 

P

pakistaniass

Newbie

Sep 30, 2015

0

0

• Sep 30, 2015

• #13

Winrar/rar is for stupeed userz. Whenever i get one in attachment, I mail back with some good f word tell dem to repack as zip or tar. How can u b stupeed enuf?

 

ChanzGrande

Elite Member

Feb 16, 2008

2,482

1,221

• Sep 30, 2015

• #14

Seems the exploit is only in the self-extracting archives one can create with WinRAR. These files would always be marked as executable files. I suppose totally unskilled people could fall victim to misuse of this exploit. However ... I'll keep using WinRAR without fear of the consequences. I would never have opened a self-extracting archive .exe file anyway.