WinRAR ZIP Arbitrary Code Execution Vulnerability (CVE-2023-38831)

What is WinRAR?




WinRAR is a popular utility tool for file compression/decompression and archive management.








What is the Attack?




CVE-2023-38831 is an arbitrary code execution vulnerability that affects WinRAR before version 6.23. The vulnerability allows threat actors to create a zip file that contains a folder and a file with the same filename. Opening (some refer to this as "viewing") the file launches a malicious script in the folder.






Why is this Significant?




This is significant because WinRAR is widely …

archive attack code code execution compression cve decompression file filename folder management popular threat threat actors tool utility version vulnerability what is winrar zip