CVE-2018-20253

In WinRAR versions prior to and including 5.60, There is an out-of-bounds write vulnerability during parsing of a crafted LHA / LZH archive formats. Successful exploitation could lead to arbitrary code execution in the context of the current user.
References
Link Resource
https://www.win-rar.com/whatsnew.html Release Notes Vendor Advisory
https://research.checkpoint.com/extracting-code-execution-from-winrar/ Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:rarlab:winrar:*:*:*:*:*:*:*:*

Information

Published : 2019-02-13 01:29

Updated : 2019-10-09 11:39


NVD link : CVE-2018-20253

Mitre link : CVE-2018-20253

Products Affected
CWE