CVE-2008-7144: Critical severity winrar vulnerability

Published Sep 1, 2009
·
Updated

Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.

Affected Software

32 affected components
RARLAB WinRAR=3.50
RARLAB WinRAR=3.60_beta8
RARLAB WinRAR=3.0.0
RARLAB WinRAR=3.70_beta6
RARLAB WinRAR=3.10
RARLAB WinRAR=3.51
RARLAB WinRAR=3.60_beta3
RARLAB WinRAR=3.41
RARLAB WinRAR=3.20
RARLAB WinRAR=3.70_beta1
RARLAB WinRAR=3.42
RARLAB WinRAR=3.60_beta2
RARLAB WinRAR=3.30
RARLAB WinRAR=3.70_beta4
RARLAB WinRAR=3.61
RARLAB WinRAR=3.60_beta5
RARLAB WinRAR=2.90
RARLAB WinRAR=3.70_beta7
RARLAB WinRAR=3.40
RARLAB WinRAR=3.70_beta3
RARLAB WinRAR=3.10_beta3
RARLAB WinRAR=3.60_beta6
RARLAB WinRAR=3.70_beta8
RARLAB WinRAR=3.60_beta4
RARLAB WinRAR=3.60_beta7
RARLAB WinRAR=3.10_beta5
RARLAB WinRAR=3.70_beta2
RARLAB WinRAR=3.62
RARLAB WinRAR=3.70_beta5
RARLAB WinRAR=3.60_beta1
RARLAB WinRAR<=3.70
RARLAB WinRAR=3.11

Remediation

Patch Available

http://www.vupen.com/english/advisories/2008/0916/references

Event History

Sep 1, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2008-7144?

The severity of CVE-2008-7144 is currently unspecified, as the exact impact and attack vectors have not been detailed.

2

How do I fix CVE-2008-7144?

To mitigate CVE-2008-7144, users should upgrade to WinRAR version 3.71 or later.

3

What software is affected by CVE-2008-7144?

CVE-2008-7144 affects multiple versions of RARLAB WinRAR, specifically versions prior to 3.71.

4

Can I still use older versions of WinRAR despite CVE-2008-7144?

Using older versions of WinRAR is not recommended due to the unidentified vulnerabilities associated with CVE-2008-7144.

5

What types of files may exploit CVE-2008-7144 vulnerabilities?

CVE-2008-7144 vulnerabilities may be exploited through specially crafted ACE, ARJ, BZ2, CAB, GZ, LHA, RAR, TAR, or ZIP files.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203