Serious RCE Bug Fixed in WinRAR

Researchers are encouraging organizations to update their installations of the WinRAR utility as soon as possible after the disclosure of a serious vulnerability that could allow an attacker to execute remote code.

The flaw is an out-of-bounds write in some versions of WinRAR, and although it can lead to remote code execution, it requires user interaction for the exploit to work, which mitigates the risk somewhat.

“This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB …

bug code code execution disclosure execute remote code flaw organizations out-of-bounds out-of-bounds write rce remote code remote code execution researchers serious update utility vulnerability winrar