ID de Prueba:	1.3.6.1.4.1.25623.1.0.834287
Categoría:	General
Título:	RARLabs WinRAR Multiple Vulnerabilities (Mar 2025) - Windows
Resumen:	WinRAR is prone to multiple; vulnerabilities.
Descripción:	Summary: WinRAR is prone to multiple vulnerabilities. Vulnerability Insight: These vulnerabilities exist: - CVE-2024-30370: An error in the archive extraction functionality. - CVE-2024-36052: A spoofing vulnerability in WinRAR. Vulnerability Impact: Successful exploitation allows an attacker to spoof the screen output via ANSI escape sequences, bypass the Mark-Of-The-Web protection mechanism and potentially compromise the affected system. Affected Software/OS: RARLabs WinRAR before 7.00 on Windows. Solution: Update to version 7.00 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2024-30370 ZDI-24-357 https://www.zerodayinitiative.com/advisories/ZDI-24-357/ vendor-provided URL https://www.rarlab.com/rarnew.htm#27.%20Busgs%20fixed Common Vulnerability Exposure (CVE) ID: CVE-2024-36052 https://sdushantha.medium.com/ansi-escape-injection-vulnerability-in-winrar-a2cbfac4b983 https://www.rarlab.com/rarnew.htm
Copyright	Copyright (C) 2025 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.