CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-02-05
WinRAR UNACEV2.dll Path Traversal and Remote Code Execution Vulnerability (CVE-2018-20250)
[Affected Scope] WinRAR versions 5.61 and prior (including UNACEV2.dll library)
[Impact] Attackers can bypass extraction path restrictions to drop malicious executables into arbitrary directories, such as the Windows Startup folder, leading to system compromise [1, 2, https://research.checkpoint.com/extracting-code-execution-from-winrar/]
[Mitigation] Immediately upgrade WinRAR to version 5.70 or later, or manually delete the vulnerable UNACEV2.dll file [1, https://research.checkpoint.com/extracting-code-execution-from-winrar/]