CVE-2019-25677: WinRAR 5.61 Denial of Service via Malformed Language File
WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violation at memory address 004F1DB8 when the application attempts to read invalid data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WinRARto a version that resolves this vulnerability.Fixed in 5.61 - Configuration
Ensure the winrar.lng language file in the WinRAR installation directory is not malformed; replace it with a valid copy or remove the malformed one to prevent local crash.
WinRAR installation directory winrar.lng = Replace/remove malformed winrar.lng
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25677?
CVE-2019-25677 is classified as a denial of service vulnerability affecting WinRAR 5.61.
How do I fix CVE-2019-25677?
To fix CVE-2019-25677, it is recommended to update WinRAR to a version newer than 5.61.
Who is affected by CVE-2019-25677?
CVE-2019-25677 affects users of WinRAR 5.61 running on x86 systems.
What can attackers do with CVE-2019-25677?
Attackers can leverage CVE-2019-25677 to crash the WinRAR application using a malformed winrar.lng language file.
Is CVE-2019-25677 a remote vulnerability?
No, CVE-2019-25677 is not a remote vulnerability; it requires local access to exploit.