CVE-2023-38831 · netVigilance record NV23-0121

RARLAB WinRAR Code Execution

past due ransomware

What to do

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA deadline 2023-09-14 · passed 2 years 11 months ago · applies to US federal civilian agencies; used elsewhere as a reference SLA

What happened

RARLAB WinRAR contains an unspecified vulnerability that allows an attacker to execute code when a user attempts to view a benign file within a ZIP archive.

Who is affected

RARLAB WinRAR. Affected version ranges are listed in the vendor advisory and the NVD entry linked under Sources.

Weakness class: CWE-351.

Timeline

2023-08-24
Added to CISA KEVExploitation in the wild confirmed by CISA
2023-09-14
CISA remediation deadlinepassed 2 years 11 months ago

Sources

NVD entry for CVE-2023-38831 nvd.nist.gov/vuln/detail/CVE-2023-38831
CISA Known Exploited Vulnerabilities catalog www.cisa.gov/known-exploited-vulnerabilities-catalog
win-rar.com www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa
nvd.nist.gov nvd.nist.gov/vuln/detail/CVE-2023-38831