Serious Vulnerability Found in WinRAR Compression Tool

Buzz

Ngày cập nhật gần nhất: 1/4/2026

Content

VTV.vn - A significant vulnerability has been discovered in WinRAR - a widely used compression tool utilized by millions of Windows users.

The vulnerability was identified by 'goodbyeselene,' an expert from the Zero Day Initiative, who reported it to RARLAB on June 8, 2023. According to security experts, the WinRAR vulnerability enables attackers to remotely execute commands on computers if users inadvertently open a file containing malicious code.

'The vulnerability lies in the decompression volume processing. This issue arises from improperly authenticated user-supplied data, causing memory access to exceed the allocated buffer limit,' stated the security expert.

According to the Common Vulnerability Scoring System (CVSS), this vulnerability's severity is rated at 7.8. Deceiving users into opening compressed files to distribute malware is not a significant challenge. However, with WinRAR's extensive user base, cybercriminals will have ample opportunities to exploit this security flaw successfully.

It is known that the vulnerability affects WinRAR versions 6.22 and earlier. Since version 6.23 was released on August 3, 2023, RARLAB has addressed the security vulnerability. Therefore, users should promptly update to the latest version of WinRAR to mitigate any potential risks.

Previously, most Windows versions only supported creating and extracting ZIP file formats. Users often had to install additional third-party applications like WinRAR if they wanted to open RAR or other formats.

Admicro AdX

However, in May 2023, Microsoft announced that Windows 11 will natively support the standard RAR file compression format, ending the need for users to install and download additional third-party decompression software. According to Microsoft, as this is an open-source solution, the default tool in Windows 11 has many advantages over third-party applications.

Frequently Asked Questions

What is the significant vulnerability discovered in WinRAR, and when was it identified?

The significant vulnerability in WinRAR was identified on June 8, 2023, by an expert named 'goodbyeselene' from the Zero Day Initiative. This vulnerability allows attackers to execute commands remotely if users open a file with malicious code.

How serious is the WinRAR vulnerability according to the Common Vulnerability Scoring System?

The WinRAR vulnerability has a severity rating of 7.8 according to the Common Vulnerability Scoring System (CVSS). This rating indicates that the vulnerability is considered quite serious and poses a significant risk to users.

What should users of WinRAR do to protect themselves from this vulnerability?

Users of WinRAR should immediately update to version 6.23 or later, as this version addresses the security vulnerability. Updating will help mitigate potential risks associated with the vulnerability found in earlier versions.

Does Windows 11 now support the RAR file compression format natively?

Yes, Windows 11 natively supports the RAR file compression format. This means users no longer need to install additional third-party software like WinRAR to create or extract RAR files.

Mytour's content is for customer care and travel encouragement only, and we are not responsible.

For errors or inappropriate content, please contact us at: [email protected]